{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:e871f034-a2cf-4b3c-b404-e2d947c9fb85","version":1,"metadata":{"timestamp":"2026-11-02T03:07:55Z","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.55.0"}]},"component":{"bom-ref":"4f4afcc11c75996b","type":"file","name":"sigstore/cosign","version":"v3.1.4"}},"components":[{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=ede125ec37d92ad7","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/cache@v6.1.0?package-id=485b91c4a58b106e","type":"library","name":"actions/cache","version":"v6.1.0","cpe":"cpe:2.3:a:actions\\/cache:actions\\/cache:v6.1.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/cache@v6.1.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v2.4.0?package-id=e4d994658f5346b1","type":"library","name":"actions/checkout","version":"v2.4.0","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/donotsubmit.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d32882c422144093","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d3fe9e4ca6cc9f60","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=b708a700a95b07ca","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance-nightly.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=6526799356d2cc28","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=b12a8a53db52855f","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=d0e3a3dea8b09f23","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-with-binary.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=5eaf3ab81c5520ca","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/github-oidc.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=054a05055ce7c920","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/golangci-lint.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=678c5067687109f4","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=3b2de65141309aa4","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-action.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=6209acd0c8a33d73","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=89064d6d8ea0c5bf","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/validate-release.yml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=3d49fd01f9e13510","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/verify-docgen.yaml"}]},{"bom-ref":"pkg:github/actions/checkout@v7.0.1?package-id=6339a8a6e2b01bdf","type":"library","name":"actions/checkout","version":"v7.0.1","cpe":"cpe:2.3:a:actions\\/checkout:actions\\/checkout:v7.0.1:*:*:*:*:*:*:*","purl":"pkg:github/actions/checkout@v7.0.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/whitespace.yaml"}]},{"bom-ref":"pkg:github/actions/github-script@v9.0.0?package-id=288a10b3df4bcb5c","type":"library","name":"actions/github-script","version":"v9.0.0","cpe":"cpe:2.3:a:actions\\/github-script:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/github-script@v9.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github-script:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github_script:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github-script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/github:actions\\/github_script:v9.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance-nightly.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=fb212a23cd07793f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1036e58251b1c99f","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=9d2f2e8fc168c6eb","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance-nightly.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=359c88f5669998ab","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=48bc4454fa9e931c","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=2ed8ee465d0e6b93","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-with-binary.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=5c38d640fad297b9","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/github-oidc.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=26950ac63d24a077","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/golangci-lint.yml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=1c009854c099c6ff","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=098581e3852c232d","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:github/actions/setup-go@v7.0.0?package-id=a9c2865f7c0700c2","type":"library","name":"actions/setup-go","version":"v7.0.0","cpe":"cpe:2.3:a:actions\\/setup-go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*","purl":"pkg:github/actions/setup-go@v7.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup-go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup_go:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup-go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/setup:actions\\/setup_go:v7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/verify-docgen.yaml"}]},{"bom-ref":"pkg:github/actions/upload-artifact@v7.0.2?package-id=f5dec57b94dce71e","type":"library","name":"actions/upload-artifact","version":"v7.0.2","cpe":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*","purl":"pkg:github/actions/upload-artifact@v7.0.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload-artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload_artifact:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload-artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:actions\\/upload:actions\\/upload_artifact:v7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-action.yml"}]},{"bom-ref":"pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260709200747-435963d16310.1?package-id=f33085d8dc64b7bb","type":"library","name":"buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go","version":"v1.36.11-20260709200747-435963d16310.1","cpe":"cpe:2.3:a:gen:go\\/bufbuild\\/protovalidate\\/protocolbuffers\\/go:v1.36.11-20260709200747-435963d16310.1:*:*:*:*:*:*:*","purl":"pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260709200747-435963d16310.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fXh8CsdNpjRr8R5vFdqtIxPt/Lno2IIJlYOdZBIZn0w="}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=1b2ccfc7f81fffea#donotsubmit","type":"library","name":"chainguard-dev/actions/donotsubmit","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/donotsubmit:chainguard-dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#donotsubmit","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/donotsubmit:chainguard_dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/donotsubmit:chainguard-dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/donotsubmit:chainguard_dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/donotsubmit:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/donotsubmit.yaml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=c004f13fc35bc87e#eof-newline","type":"library","name":"chainguard-dev/actions/eof-newline","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/eof-newline:chainguard-dev\\/actions\\/eof-newline:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#eof-newline","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/eof-newline:chainguard_dev\\/actions\\/eof_newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/eof_newline:chainguard-dev\\/actions\\/eof-newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/eof_newline:chainguard_dev\\/actions\\/eof_newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/eof:chainguard-dev\\/actions\\/eof-newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/eof:chainguard_dev\\/actions\\/eof_newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/eof:chainguard-dev\\/actions\\/eof-newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/eof:chainguard_dev\\/actions\\/eof_newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/eof-newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/eof_newline:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/whitespace.yaml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=4e7d14937697b826#kind-diag","type":"library","name":"chainguard-dev/actions/kind-diag","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#kind-diag","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=28ba67ca425c8951#kind-diag","type":"library","name":"chainguard-dev/actions/kind-diag","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#kind-diag","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=2a30ad6828bd2a53#kind-diag","type":"library","name":"chainguard-dev/actions/kind-diag","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#kind-diag","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind-diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind_diag:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/kind:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/kind-diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/kind_diag:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=91f531d7f5774d84#setup-mirror","type":"library","name":"chainguard-dev/actions/setup-mirror","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/setup-mirror:chainguard-dev\\/actions\\/setup-mirror:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#setup-mirror","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/setup-mirror:chainguard_dev\\/actions\\/setup_mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/setup_mirror:chainguard-dev\\/actions\\/setup-mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/setup_mirror:chainguard_dev\\/actions\\/setup_mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/setup:chainguard-dev\\/actions\\/setup-mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/setup:chainguard_dev\\/actions\\/setup_mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/setup:chainguard-dev\\/actions\\/setup-mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/setup:chainguard_dev\\/actions\\/setup_mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/setup-mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/setup_mirror:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:github/chainguard-dev/actions@v1.6.41?package-id=9d0ddae8e401cd2d#trailing-space","type":"library","name":"chainguard-dev/actions/trailing-space","version":"v1.6.41","cpe":"cpe:2.3:a:chainguard-dev\\/actions\\/trailing-space:chainguard-dev\\/actions\\/trailing-space:v1.6.41:*:*:*:*:*:*:*","purl":"pkg:github/chainguard-dev/actions@v1.6.41#trailing-space","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/trailing-space:chainguard_dev\\/actions\\/trailing_space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/trailing_space:chainguard-dev\\/actions\\/trailing-space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/trailing_space:chainguard_dev\\/actions\\/trailing_space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/trailing:chainguard-dev\\/actions\\/trailing-space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard-dev\\/actions\\/trailing:chainguard_dev\\/actions\\/trailing_space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/trailing:chainguard-dev\\/actions\\/trailing-space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard_dev\\/actions\\/trailing:chainguard_dev\\/actions\\/trailing_space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard-dev\\/actions\\/trailing-space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:chainguard:chainguard_dev\\/actions\\/trailing_space:v1.6.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/whitespace.yaml"}]},{"bom-ref":"pkg:golang/cloud.google.com/go@v0.123.0?package-id=419b179104eb109e","type":"library","name":"cloud.google.com/go","version":"v0.123.0","purl":"pkg:golang/cloud.google.com/go@v0.123.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2NAUJwPR47q+E35uaJeYoNhuNEM9kM8SjgRgdeOJUSE="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth@v0.24.1-0.20261001053825-dbc26066f70a?package-id=2fa9416b4344aba5","type":"library","name":"cloud.google.com/go/auth","version":"v0.24.1-0.20261001053825-dbc26066f70a","cpe":"cpe:2.3:a:go:auth:v0.24.1-0.20261001053825-dbc26066f70a:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth@v0.24.1-0.20261001053825-dbc26066f70a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jW1ZLFy9oa5ai8LOI40z6s+DL1cO/L1KSm9hVGnibn8="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.3.0?package-id=2a624276f70575e9","type":"library","name":"cloud.google.com/go/auth/oauth2adapt","version":"v0.3.0","cpe":"cpe:2.3:a:go:auth\\/oauth2adapt:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FY8oSZpCYoUNv6QxVODuMjQz4IlSOVeiQtZ08vLPz88="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0?package-id=c1575fca953a051b","type":"library","name":"cloud.google.com/go/compute/metadata","version":"v0.10.0","cpe":"cpe:2.3:a:go:compute\\/metadata:v0.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/compute/metadata@v0.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pyKMUQSwchgkIBBJGdILqQbs/BNJXqwSA7Ej6LAvvtY="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/iam@v1.13.0?package-id=1d1bbdf50b68118a","type":"library","name":"cloud.google.com/go/iam","version":"v1.13.0","cpe":"cpe:2.3:a:go:iam:v1.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/iam@v1.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ufT3FPT5rFFXu6UtLkNoxaOaV5EuA1dsSkmemCSTo6U="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/kms@v1.33.0?package-id=9b895dc24fb500fe","type":"library","name":"cloud.google.com/go/kms","version":"v1.33.0","cpe":"cpe:2.3:a:go:kms:v1.33.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/kms@v1.33.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pG0X78m212b2pv9N4fdMoUO69LuZGQ9kSvn8sHBOFAo="}]},{"bom-ref":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0?package-id=a301c3b317f0e271","type":"library","name":"cloud.google.com/go/longrunning","version":"v1.2.0","cpe":"cpe:2.3:a:go:longrunning:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/cloud.google.com/go/longrunning@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WjYH3YHBGCxGJP9M4dWGHBfXr/cFIjMkNgWcJj7/iMM="}]},{"bom-ref":"pkg:github/codecov/codecov-action@v7.1.1?package-id=3f4ae90aaecfb17a","type":"library","name":"codecov/codecov-action","version":"v7.1.1","cpe":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*","purl":"pkg:github/codecov/codecov-action@v7.1.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov-action:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov_action:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov-action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:codecov\\/codecov:codecov\\/codecov_action:v7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:golang/connectrpc.com/connect@v1.20.0?package-id=3f5d59db0e5501c5","type":"library","name":"connectrpc.com/connect","version":"v1.20.0","purl":"pkg:golang/connectrpc.com/connect@v1.20.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6TNDAB+WeNd2uolWNlYczB5E0KNNaVMNUEx8JEUsPmQ="}]},{"bom-ref":"pkg:github/cpanato/vault-installer@v1.4.0?package-id=e23c4cbf29cdc5e8","type":"library","name":"cpanato/vault-installer","version":"v1.4.0","cpe":"cpe:2.3:a:cpanato\\/vault-installer:cpanato\\/vault-installer:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:github/cpanato/vault-installer@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpanato\\/vault-installer:cpanato\\/vault_installer:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpanato\\/vault_installer:cpanato\\/vault-installer:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpanato\\/vault_installer:cpanato\\/vault_installer:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpanato\\/vault:cpanato\\/vault-installer:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpanato\\/vault:cpanato\\/vault_installer:v1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20260601085548-328ff8e2c943?package-id=f00e5abff96ba750","type":"library","name":"cuelabs.dev/go/oci/ociregistry","version":"v0.0.0-20260601085548-328ff8e2c943","cpe":"cpe:2.3:a:go:oci\\/ociregistry:v0.0.0-20260601085548-328ff8e2c943:*:*:*:*:*:*:*","purl":"pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20260601085548-328ff8e2c943","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XUtzi/yWlmuy8V6kkmVbbmirmUqcFe9Ce3gmEaHXf1Q="}]},{"bom-ref":"pkg:golang/cuelang.org/go@v0.17.1?package-id=1127507e7ddebf25","type":"library","name":"cuelang.org/go","version":"v0.17.1","purl":"pkg:golang/cuelang.org/go@v0.17.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:liOkxZDqTHrzq0USJX+6bMYOZ5PSf+wzvQr15AHpDCQ="}]},{"bom-ref":"pkg:github/docker/login-action@v4.6.0?package-id=3d30873e27520d9e","type":"library","name":"docker/login-action","version":"v4.6.0","cpe":"cpe:2.3:a:docker\\/login-action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*","purl":"pkg:github/docker/login-action@v4.6.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login-action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login_action:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login-action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker\\/login:docker\\/login_action:v4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.18.1?package-id=3e8dc69f5631cb42","type":"library","name":"github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider","version":"v0.18.1","cpe":"cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/credentials\\/provider:v0.18.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider@v0.18.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/credentials\\/provider:v0.18.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YWDC5K6uH/hUB9iBqNMzcbYw/mpySDyRiMv4auyB7xY="}]},{"bom-ref":"pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.9?package-id=e6695eb198b7b9a9","type":"library","name":"github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata","version":"v0.0.9","cpe":"cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/ecsmetadata:v0.0.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata@v0.0.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/ecsmetadata:v0.0.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LW8G8Zf9R6+F0ZpV1FLimv2rVaBRRX+mR1b6N6vIpJc="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=5713a6139f493cd6","type":"library","name":"github.com/Azure/azure-sdk-for-go","version":"v68.0.0+incompatible","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.23.1?package-id=1229fcce2d1312e8","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azcore","version":"v1.23.1","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.23.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.23.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.23.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zvXfGJCWvywnCA814d8ZiVyt+fm9nnTE8xSb99zRyfo="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.1?package-id=757d24664783b304","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/azidentity","version":"v1.14.1","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:u93s+zU2JD62im61Bm5CZIc1ZrOJaIAWEg0WOrMVkEo="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=a2a7b3aceddda5dc","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/internal","version":"v1.12.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=c9efcb7e81a065f3","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys","version":"v1.5.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM="}]},{"bom-ref":"pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=657295fde8a1734c","type":"library","name":"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal","version":"v1.2.0","cpe":"cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4="}]},{"bom-ref":"pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c?package-id=68160b5e3e26edbb","type":"library","name":"github.com/Azure/go-ansiterm","version":"v0.0.0-20250102033503-faa5f7b0171c","cpe":"cpe:2.3:a:Azure:go-ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_ansiterm:v0.0.0-20250102033503-faa5f7b0171c:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest@v14.2.0%2Bincompatible?package-id=016246aa9b10951a","type":"library","name":"github.com/Azure/go-autorest","version":"v14.2.0+incompatible","cpe":"cpe:2.3:a:Azure:go-autorest:v14.2.0\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest@v14.2.0%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest:v14.2.0\\+incompatible:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V5VMDjClD3GiElqLWO7mz2MxNAK/vTfRHdAubSIPRgs="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=7b77fe5fb6795c3c","type":"library","name":"github.com/Azure/go-autorest/autorest","version":"v0.11.29","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.29","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=36fa437fdd8fe9b4","type":"library","name":"github.com/Azure/go-autorest/autorest/adal","version":"v0.9.23","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.23","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=a1e9aac290c324af","type":"library","name":"github.com/Azure/go-autorest/autorest/azure/auth","version":"v0.5.12","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=7dd50c7959a1f0a4","type":"library","name":"github.com/Azure/go-autorest/autorest/azure/cli","version":"v0.4.6","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=75ca8d321af585ce","type":"library","name":"github.com/Azure/go-autorest/autorest/date","version":"v0.3.0","cpe":"cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=233f7bfa63d88f7e","type":"library","name":"github.com/Azure/go-autorest/logger","version":"v0.2.1","cpe":"cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg="}]},{"bom-ref":"pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=853390bbbd579bbd","type":"library","name":"github.com/Azure/go-autorest/tracing","version":"v0.6.0","cpe":"cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo="}]},{"bom-ref":"pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.8.0?package-id=cdd94c5024f21cac","type":"library","name":"github.com/AzureAD/microsoft-authentication-library-for-go","version":"v1.8.0","cpe":"cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Nljr4q1GRA/5vCrMONS+g4u4LRHNgOXVSh3O43J2CnI="}]},{"bom-ref":"pkg:golang/github.com/microsoft/go-winio@v0.6.2?package-id=bbb3632683ad51c2","type":"library","name":"github.com/Microsoft/go-winio","version":"v0.6.2","cpe":"cpe:2.3:a:Microsoft:go-winio:v0.6.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/Microsoft/go-winio@v0.6.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:Microsoft:go_winio:v0.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY="}]},{"bom-ref":"pkg:golang/github.com/protonmail/go-crypto@v1.4.1?package-id=6d5b046a5726eafa","type":"library","name":"github.com/ProtonMail/go-crypto","version":"v1.4.1","cpe":"cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9RfcZHqEQUvP8RzecWEUafnZVtEvrBVL9BiF67IQOfM="}]},{"bom-ref":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=faf4ac442ab1d72e","type":"library","name":"github.com/agnivade/levenshtein","version":"v1.2.1","cpe":"cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/agnivade/levenshtein@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=f6a77e0fb77ea263","type":"library","name":"github.com/alibabacloud-go/alibabacloud-gateway-spi","version":"v0.0.4","cpe":"cpe:2.3:a:alibabacloud-go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iC9YFYKDGEy3n/FtqJnOkZsene9olVspKmkX5A2YBEo="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=97e92ef10680d97a","type":"library","name":"github.com/alibabacloud-go/cr-20160607","version":"v1.0.1","cpe":"cpe:2.3:a:alibabacloud-go:cr-20160607:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:cr-20160607:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:cr_20160607:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:cr-20160607:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:cr_20160607:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WEnP1iPFKJU74ryUKh/YDPHoxMZawqlPajOymyNAkts="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=99c43422d2c48426","type":"library","name":"github.com/alibabacloud-go/cr-20181201","version":"v1.0.10","cpe":"cpe:2.3:a:alibabacloud-go:cr-20181201:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:cr-20181201:v1.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:cr_20181201:v1.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:cr-20181201:v1.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:cr_20181201:v1.0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:B60f6S1imsgn2fgC6X6FrVNrONDrbCT0NwYhsJ0C9/c="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=b694a3c168ffd287","type":"library","name":"github.com/alibabacloud-go/darabonba-openapi","version":"v0.2.1","cpe":"cpe:2.3:a:alibabacloud-go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WyzxxKvhdVDlwpAMOHgAiCJ+NXa6g5ZWPFEzaK/ewwY="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/debug@v1.0.1?package-id=ba6c3b0cd72c318f","type":"library","name":"github.com/alibabacloud-go/debug","version":"v1.0.1","cpe":"cpe:2.3:a:alibabacloud-go:debug:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/debug@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:debug:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:debug:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MsW9SmUtbb1Fnt3ieC6NNZi6aEwrXfDksD4QA6GSbPg="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=feb336224a6e3430","type":"library","name":"github.com/alibabacloud-go/endpoint-util","version":"v1.1.1","cpe":"cpe:2.3:a:alibabacloud-go:endpoint-util:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:endpoint-util:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:endpoint_util:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:endpoint-util:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:endpoint_util:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZkBv2/jnghxtU0p+upSU0GGzW1VL9GQdZO3mcSUTUy8="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=33f3e98dd153c8be","type":"library","name":"github.com/alibabacloud-go/openapi-util","version":"v0.1.0","cpe":"cpe:2.3:a:alibabacloud-go:openapi-util:v0.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:openapi_util:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:openapi-util:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:openapi_util:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:openapi-util:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:openapi_util:v0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0z75cIULkDrdEhkLWgi9tnLe+KhAFE/r5Pb3312/eAY="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/tea@v1.3.12?package-id=cfd1d8696758c278","type":"library","name":"github.com/alibabacloud-go/tea","version":"v1.3.12","cpe":"cpe:2.3:a:alibabacloud-go:tea:v1.3.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/tea@v1.3.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:tea:v1.3.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:tea:v1.3.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ir2Io80UlBy1JHf7t+uCTxmaGQtiEta1WpV29NGJTkE="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=aaf0b22945765c75","type":"library","name":"github.com/alibabacloud-go/tea-utils","version":"v1.4.5","cpe":"cpe:2.3:a:alibabacloud-go:tea-utils:v1.4.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:tea_utils:v1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:tea-utils:v1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:tea_utils:v1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:tea-utils:v1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:tea_utils:v1.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA="}]},{"bom-ref":"pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=faa151e1c7c46775","type":"library","name":"github.com/alibabacloud-go/tea-xml","version":"v1.1.3","cpe":"cpe:2.3:a:alibabacloud-go:tea-xml:v1.1.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud-go:tea_xml:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:tea-xml:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud_go:tea_xml:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:tea-xml:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alibabacloud:tea_xml:v1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7LYnm+JbOq2B+T/B0fHC4Ies4/FofC4zHzYtqw7dgt0="}]},{"bom-ref":"pkg:golang/github.com/aliyun/credentials-go@v1.4.7?package-id=f26844ae48bd6b14","type":"library","name":"github.com/aliyun/credentials-go","version":"v1.4.7","cpe":"cpe:2.3:a:aliyun:credentials-go:v1.4.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aliyun/credentials-go@v1.4.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aliyun:credentials_go:v1.4.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:T17dLqEtPUFvjDRRb5giVvLh6dFT8IcNFJJb7MeyCxw="}]},{"bom-ref":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=cb662d351fd52534","type":"library","name":"github.com/asaskevich/govalidator","version":"v0.0.0-20230301143203-a9d515a09cc2","cpe":"cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3?package-id=80fcadd29c6d1988","type":"library","name":"github.com/aws/aws-sdk-go-v2","version":"v1.47.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2:v1.47.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2@v1.47.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2:v1.47.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HRoT/MkNi3bjO5xF4dCzLzvVmkvRGHj3/cLINDnJejk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9?package-id=d75beef7bd34610f","type":"library","name":"github.com/aws/aws-sdk-go-v2/config","version":"v1.33.9","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.33.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.33.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.33.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Hv6bcQUJVnmuWaKjqD6Ot8sE75NrWsWV20oGT5aWle0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9?package-id=c15b638e3b2846ee","type":"library","name":"github.com/aws/aws-sdk-go-v2/credentials","version":"v1.20.9","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.20.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.20.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.20.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:SNO55PnWhaDafsOcv16lCA0kdoFMl/YlegWoVsU02s0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3?package-id=4df49b9a3b802acb","type":"library","name":"github.com/aws/aws-sdk-go-v2/feature/ec2/imds","version":"v1.20.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.20.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.20.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gr3b87OLB29jymWPzp/CAyXwQRJVE+sC4Wm0qBIKHsk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6?package-id=9e94455a9b8c51de","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/configsources","version":"v1.5.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.5.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.5.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CqL8NN3p4I0JTwwV5MEoatIl4Y2amZ2X9dRD+0hbRL0="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6?package-id=1f07a3748a74303e","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/endpoints/v2","version":"v2.8.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.8.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.8.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.8.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FpBq24TG6WVSObTNhQOv7Q0088rounUUlwn3zlNItkM="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6?package-id=fac2c64aadcb6e5c","type":"library","name":"github.com/aws/aws-sdk-go-v2/internal/v4a","version":"v1.5.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.5.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.5.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Qmn60RWuk9+bd2ddvJJqwf3Cpac3VvGMOdbGemtUhX4="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=291e9d7a5ca74d79","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ecr","version":"v1.55.3","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RtGctYMmkTerGClvdY6bHXdtly4FeYw9wz/NPz62LF8="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=6f26cf3c1e9363cc","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ecrpublic","version":"v1.38.10","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1A/sI3LNMi3fhRI5TFLMwwo7ALAALSFVCSGvFlr1Iys="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21?package-id=cfa70038513a1587","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding","version":"v1.13.21","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.21:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.21","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.21:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:e6YW5uME30TkrElR+4/xcY7NB6CCj2dcv7vtmGXhfhQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6?package-id=ef3450820ba754a7","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/internal/presigned-url","version":"v1.14.6","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.14.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.14.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.14.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:LHHdobjo5le1sjJdolitV7uVvYg3wkaeM1Ju2fDgeZQ="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.61.4?package-id=5668a3974b31e06c","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/kms","version":"v1.61.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.61.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.61.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.61.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vW7497x7W6ucLJAqDt96jIdO4+IWLMB3p98UubwjdqM="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4?package-id=c8db54eff254ac75","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/signin","version":"v1.10.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.10.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.10.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.10.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tvpDjuUvgKURf3Yk4hOaGbZ4QdY+070OWcA5d6LUv2A="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4?package-id=85c3e9406341606a","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sso","version":"v1.38.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.38.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.38.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.38.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ChCtagixSFOxltv0o6E3NT8F7ksvZtZGPwUBynO5Nmk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4?package-id=b9933723c7b8fdb5","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/ssooidc","version":"v1.43.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.43.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.43.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.43.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:j6c+HA4AoS0EBEjArPjavFEBrucJEryfrQU0TffmACk="}]},{"bom-ref":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4?package-id=e081edecd57a26d4","type":"library","name":"github.com/aws/aws-sdk-go-v2/service/sts","version":"v1.51.4","cpe":"cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.51.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.51.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.51.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OKEfbf2tcfsF2pBk/S9QqNpo6alaAtiBs4hysCsBjPw="}]},{"bom-ref":"pkg:golang/github.com/aws/smithy-go@v1.28.5?package-id=3a463e5d4a869e7e","type":"library","name":"github.com/aws/smithy-go","version":"v1.28.5","cpe":"cpe:2.3:a:aws:smithy-go:v1.28.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/aws/smithy-go@v1.28.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:aws:smithy_go:v1.28.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OqbqKtzY9NUnr2yAe9+hiTdFb20tNaK/lI0PMOGXX9k="}]},{"bom-ref":"pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=42a63a5a99a75f72","type":"library","name":"github.com/awslabs/amazon-ecr-credential-helper/ecr-login","version":"v0.12.0","cpe":"cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo="}]},{"bom-ref":"pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=4b7f4d17e7911c1a","type":"library","name":"github.com/beorn7/perks","version":"v1.0.1","cpe":"cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/beorn7/perks@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM="}]},{"bom-ref":"pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=c2fec27cc263d1ed","type":"library","name":"github.com/buildkite/agent/v3","version":"v3.130.0","cpe":"cpe:2.3:a:buildkite:agent\\/v3:v3.130.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buildkite/agent/v3@v3.130.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fYo5iTrYAK6OTBWBoF7M627tnCKhZaRTD+Ex186dJZ0="}]},{"bom-ref":"pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=67d708290c8f1f72","type":"library","name":"github.com/buildkite/go-pipeline","version":"v0.17.1","cpe":"cpe:2.3:a:buildkite:go-pipeline:v0.17.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buildkite/go-pipeline@v0.17.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:buildkite:go_pipeline:v0.17.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:m7+a2SF9hLjqsbe6HShmzm9M4rDk4QtanKTF2LD6LG0="}]},{"bom-ref":"pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=087b501ede09dfb2","type":"library","name":"github.com/buildkite/interpolate","version":"v0.1.5","cpe":"cpe:2.3:a:buildkite:interpolate:v0.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buildkite/interpolate@v0.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:v2Ji3voik69UZlbfoqzx+qfcsOKLA61nHdU79VV+tPU="}]},{"bom-ref":"pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=7c60fb2fc0e47081","type":"library","name":"github.com/buildkite/roko","version":"v1.4.0","cpe":"cpe:2.3:a:buildkite:roko:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/buildkite/roko@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DxixoCdpNqxu4/1lXrXbfsKbJSd7r1qoxtef/TT2J80="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=cba7b797553a3b0f","type":"library","name":"github.com/cenkalti/backoff/v4","version":"v4.3.0","cpe":"cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8="}]},{"bom-ref":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=5e9265ff67aa38c8","type":"library","name":"github.com/cenkalti/backoff/v5","version":"v5.0.3","cpe":"cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM="}]},{"bom-ref":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=44163de5007e6449","type":"library","name":"github.com/cespare/xxhash/v2","version":"v2.3.0","cpe":"cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cespare/xxhash/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs="}]},{"bom-ref":"pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=390d5c6bd50e7e7b","type":"library","name":"github.com/chrismellard/docker-credential-acr-env","version":"v0.0.0-20230304212654-82a0ddb27589","cpe":"cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4="}]},{"bom-ref":"pkg:golang/github.com/chzyer/readline@v1.5.1?package-id=34e119f1016d2f12","type":"library","name":"github.com/chzyer/readline","version":"v1.5.1","cpe":"cpe:2.3:a:chzyer:readline:v1.5.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/chzyer/readline@v1.5.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:upd/6fQk4src78LMRzh5vItIt361/o4uq553V8B5sGI="}]},{"bom-ref":"pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=5dd2889b35c08fb8","type":"library","name":"github.com/clbanning/mxj/v2","version":"v2.7.0","cpe":"cpe:2.3:a:clbanning:mxj\\/v2:v2.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/clbanning/mxj/v2@v2.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME="}]},{"bom-ref":"pkg:golang/github.com/cloudflare/circl@v1.6.3?package-id=3321c9be70fde1d7","type":"library","name":"github.com/cloudflare/circl","version":"v1.6.3","cpe":"cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/cloudflare/circl@v1.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8="}]},{"bom-ref":"pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3?package-id=87026e07244fd50d","type":"library","name":"github.com/cockroachdb/apd/v3","version":"v3.2.3","cpe":"cpe:2.3:a:cockroachdb:apd\\/v3:v3.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4Zx+I3R35bFXMnltzmjP79i2cravE4jTRL6ps9Aux80="}]},{"bom-ref":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=d3bc55ddcd7e2737","type":"library","name":"github.com/common-nighthawk/go-figure","version":"v0.0.0-20210622060536-734e95fb86be","cpe":"cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ="}]},{"bom-ref":"pkg:golang/github.com/coreos/go-oidc/v3@v3.21.0?package-id=e5919b0d2d6e62f0","type":"library","name":"github.com/coreos/go-oidc/v3","version":"v3.21.0","cpe":"cpe:2.3:a:coreos:go-oidc\\/v3:v3.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/coreos/go-oidc/v3@v3.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:coreos:go_oidc\\/v3:v3.21.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wZo4Q9Pum8dYEj0eMUPrqR+kvuGkeUplbLpNCkBqoWM="}]},{"bom-ref":"pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7?package-id=7213409f646ddf27","type":"library","name":"github.com/cpuguy83/go-md2man/v2","version":"v2.0.7","cpe":"cpe:2.3:a:cpuguy83:go-md2man\\/v2:v2.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cpuguy83:go_md2man\\/v2:v2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zbFlGlXEAKlwXpmvle3d8Oe3YnkKIK4xSRTd3sHPnBo="}]},{"bom-ref":"pkg:golang/github.com/creack/pty@v1.1.24?package-id=23f833d68a159b6f","type":"library","name":"github.com/creack/pty","version":"v1.1.24","cpe":"cpe:2.3:a:creack:pty:v1.1.24:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/creack/pty@v1.1.24","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s="}]},{"bom-ref":"pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=486949b49c9aebb5","type":"library","name":"github.com/cyberphone/json-canonicalization","version":"v0.0.0-20241213102144-19d51d7fe467","cpe":"cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q="}]},{"bom-ref":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=e1e0f1232be39ea0","type":"library","name":"github.com/davecgh/go-spew","version":"v1.1.2-0.20180830191138-d8f796af33cc","cpe":"cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM="}]},{"bom-ref":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1?package-id=13b8b4fc23607aa8","type":"library","name":"github.com/decred/dcrd/dcrec/secp256k1/v4","version":"v4.4.1","cpe":"cpe:2.3:a:decred:dcrd\\/dcrec\\/secp256k1\\/v4:v4.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5RVFMOWjMyRy8cARdy79nAmgYw3hK/4HUq48LQ6Wwqo="}]},{"bom-ref":"pkg:golang/github.com/depcheck-test/depcheck-test@v0.0.0-20220607135614-199033aaa936?package-id=bb6d176634bdf437","type":"library","name":"github.com/depcheck-test/depcheck-test","version":"v0.0.0-20220607135614-199033aaa936","cpe":"cpe:2.3:a:depcheck-test:depcheck-test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/depcheck-test/depcheck-test@v0.0.0-20220607135614-199033aaa936","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:depcheck-test:depcheck_test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:depcheck_test:depcheck-test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:depcheck_test:depcheck_test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:depcheck:depcheck-test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:depcheck:depcheck_test:v0.0.0-20220607135614-199033aaa936:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:foGzavPWwtoyBvjWyKJYDYsyzy+23iBV7NKTwdk+LRY="}]},{"bom-ref":"pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=5c691e743347ac57","type":"library","name":"github.com/digitorus/pkcs7","version":"v0.0.0-20230818184609-3a137a874352","cpe":"cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE="}]},{"bom-ref":"pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=fecacbfb0cf40d1f","type":"library","name":"github.com/digitorus/timestamp","version":"v0.0.0-20231217203849-220c5c2851b7","cpe":"cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I="}]},{"bom-ref":"pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=28a257f3926539b3","type":"library","name":"github.com/dimchansky/utfbom","version":"v1.1.1","cpe":"cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dimchansky/utfbom@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U="}]},{"bom-ref":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible?package-id=6e2cfe0165378e7b","type":"library","name":"github.com/docker/cli","version":"v29.7.2+incompatible","cpe":"cpe:2.3:a:docker:cli:v29.7.2\\+incompatible:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/cli@v29.7.2%2Bincompatible","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dlkwallR8XqfeVnA2ELEhdwvb4lsSwuB4IgsG8Q9cLY="}]},{"bom-ref":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=fdcd0f78d56ec20a","type":"library","name":"github.com/docker/docker-credential-helpers","version":"v0.9.5","cpe":"cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY="}]},{"bom-ref":"pkg:golang/github.com/docker/go-units@v0.5.0?package-id=a9271522b4f3233c","type":"library","name":"github.com/docker/go-units","version":"v0.5.0","cpe":"cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/docker/go-units@v0.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4="}]},{"bom-ref":"pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=8432997ae2bcf2c7","type":"library","name":"github.com/dustin/go-humanize","version":"v1.0.1","cpe":"cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/dustin/go-humanize@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY="}]},{"bom-ref":"pkg:golang/github.com/eclipse-keypont/crypto11@v1.6.8?package-id=9feb5b203d4adcf2","type":"library","name":"github.com/eclipse-keypont/crypto11","version":"v1.6.8","cpe":"cpe:2.3:a:eclipse-keypont:crypto11:v1.6.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/eclipse-keypont/crypto11@v1.6.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:eclipse_keypont:crypto11:v1.6.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eclipse:crypto11:v1.6.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4OE1GSUYFWbZb27S2+Glj6bQpiPND5BfnPIFxOCIkKU="}]},{"bom-ref":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=fbbc9aa76747c037","type":"library","name":"github.com/emicklei/go-restful/v3","version":"v3.13.0","cpe":"cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes="}]},{"bom-ref":"pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=04a058b79c34e102","type":"library","name":"github.com/emicklei/proto","version":"v1.14.3","cpe":"cpe:2.3:a:emicklei:proto:v1.14.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/emicklei/proto@v1.14.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q="}]},{"bom-ref":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0?package-id=21924c216340421a","type":"library","name":"github.com/felixge/httpsnoop","version":"v1.1.0","cpe":"cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/felixge/httpsnoop@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3YtUj32ZZkqZtt3sZZsClsymw/QDuVfpNhoA31zeORc="}]},{"bom-ref":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=73529cb77374f1e3","type":"library","name":"github.com/fsnotify/fsnotify","version":"v1.10.1","cpe":"cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fsnotify/fsnotify@v1.10.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho="}]},{"bom-ref":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=69d156e101aa4070","type":"library","name":"github.com/fxamacker/cbor/v2","version":"v2.9.0","cpe":"cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM="}]},{"bom-ref":"pkg:golang/github.com/go-chi/chi/v5@v5.3.2?package-id=68087a0ec3b5d563","type":"library","name":"github.com/go-chi/chi/v5","version":"v5.3.2","cpe":"cpe:2.3:a:go-chi:chi\\/v5:v5.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-chi/chi/v5@v5.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_chi:chi\\/v5:v5.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:chi\\/v5:v5.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:5YQkICvTCSZ25hoRsyJazN0scjzKGiu4VAUc7H1o1nY="}]},{"bom-ref":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.6?package-id=3f9ecd636ff815cb","type":"library","name":"github.com/go-jose/go-jose/v4","version":"v4.1.6","cpe":"cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-jose/go-jose/v4@v4.1.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go-jose\\/v4:v4.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:go_jose\\/v4:v4.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sNRkftxFJxwsILiQukqp5z83QBSmntVwmgRY7AqBDO4="}]},{"bom-ref":"pkg:golang/github.com/go-logr/logr@v1.4.4?package-id=5d64ad5913a6841c","type":"library","name":"github.com/go-logr/logr","version":"v1.4.4","cpe":"cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/logr@v1.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8="}]},{"bom-ref":"pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=ed7921825a53d3f4","type":"library","name":"github.com/go-logr/stdr","version":"v1.2.2","cpe":"cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-logr/stdr@v1.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/analysis@v1.0.0?package-id=6ebb9e32bd873b0f","type":"library","name":"github.com/go-openapi/analysis","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:analysis:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/analysis@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:analysis:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:sNvbAGCJqUTqIAodr9IVqJMmuZas3YS9ms1dGK9yiJ4="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/errors@v0.22.9?package-id=46c32284cdf2eb2e","type":"library","name":"github.com/go-openapi/errors","version":"v0.22.9","cpe":"cpe:2.3:a:go-openapi:errors:v0.22.9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/errors@v0.22.9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:errors:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:errors:v0.22.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HI9+SyVYiRzyeBQGv0CbWbQa+u2S0nny7G7AhY+UMiM="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1?package-id=abc98ffaac50ccdb","type":"library","name":"github.com/go-openapi/jsonpointer","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonpointer@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonpointer:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:2KxywRmNwJkT/FMBa3iRNHEaAxSJvjqoufQZy3au1Mg="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2?package-id=8254c88fcd436a83","type":"library","name":"github.com/go-openapi/jsonreference","version":"v1.0.2","cpe":"cpe:2.3:a:go-openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/jsonreference@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:jsonreference:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oS4et8FOf3p3UQxEo4Xt0esijmBUM+F259Xl72OSZsc="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/loads@v0.25.3?package-id=7ee61b65ed0e51ef","type":"library","name":"github.com/go-openapi/loads","version":"v0.25.3","cpe":"cpe:2.3:a:go-openapi:loads:v0.25.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/loads@v0.25.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:loads:v0.25.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:V+jKy/thXWdLJUuYC8sZX2dICyAa8M3DokF70jj34P0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime@v0.33.3?package-id=3857c5830277efbf","type":"library","name":"github.com/go-openapi/runtime","version":"v0.33.3","cpe":"cpe:2.3:a:go-openapi:runtime:v0.33.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime@v0.33.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qVgTDaFH+pzO8UqlwYNVmx2DD+nwVK3rB65V29ednD0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.3?package-id=b8661e55d8501e5c","type":"library","name":"github.com/go-openapi/runtime/server-middleware","version":"v0.33.3","cpe":"cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.33.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server-middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:runtime\\/server_middleware:v0.33.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Td5UBla/J/KCjlsD0tmZYWQWxnT4gHpfXbueLQv9Umw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/spec@v1.0.1?package-id=2e7fffcb8b78f3e7","type":"library","name":"github.com/go-openapi/spec","version":"v1.0.1","cpe":"cpe:2.3:a:go-openapi:spec:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/spec@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:spec:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lj2vdGpNDcVgwRc6qXdw6qt/KQpCtSa9tnUH6vpDPDk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/strfmt@v0.27.3?package-id=a3c58d41c5351cca","type":"library","name":"github.com/go-openapi/strfmt","version":"v0.27.3","cpe":"cpe:2.3:a:go-openapi:strfmt:v0.27.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/strfmt@v0.27.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:strfmt:v0.27.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:strfmt:v0.27.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cyf4J5Wjpd6bFpAs44MF8PsbWF/mWXhn82Ck/hgQZgw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag@v0.28.0?package-id=229e9725ae10468f","type":"library","name":"github.com/go-openapi/swag","version":"v0.28.0","cpe":"cpe:2.3:a:go-openapi:swag:v0.28.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag@v0.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag:v0.28.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xkgbOSKj6DZziNpyqRRAOt3GJGtgjgsd2RoyT30VWuw="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2?package-id=cd50e9f9b93c0954","type":"library","name":"github.com/go-openapi/swag/cmdutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/cmdutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/cmdutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cXEzX/nWCODon251f+1HgL75/R4XXML5IZxgLCWMoro="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2?package-id=48421dcf0f10a053","type":"library","name":"github.com/go-openapi/swag/conv","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/conv@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/conv:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8c9shoB8l0QRSR6ymq1llHdBWDqpIgJfjTGHx3Vuhm0="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2?package-id=f21f6157f28d308a","type":"library","name":"github.com/go-openapi/swag/fileutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/fileutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/fileutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mdUL+Vw5ah1fO1AvFCoHeIyv7YZsCz2MN3KNqd/lLVI="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2?package-id=b554c799fad008bb","type":"library","name":"github.com/go-openapi/swag/jsonutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/jsonutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/jsonutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:uZNSD2/rJDYAfvsLYkykTzXuyxM3QpDKV9jhRHrMu6k="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.1?package-id=e007145a49c5df16","type":"library","name":"github.com/go-openapi/swag/loading","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/loading:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/loading@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/loading:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/loading:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FCv5fG8UhTdDJa2R7w+5O9Ekpcbw7tt0nFWvmDKGBjc="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.1?package-id=a0a2044258202348","type":"library","name":"github.com/go-openapi/swag/mangling","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/mangling@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/mangling:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lHALtvYCdxVnRl4GrHmFPwfBTZYIObqdGNSKyu/8D6I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2?package-id=6274a18493f7e891","type":"library","name":"github.com/go-openapi/swag/netutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/netutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/netutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dBli6jyUa93sDS/XYWShJzf4+nnVfFKfvY9SLUaUzB8="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2?package-id=443eb30d6e3aff36","type":"library","name":"github.com/go-openapi/swag/pools","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/pools@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/pools:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PlGoDRF8WtSyXkedZZkpW3f9wDhFf3u8KtaBcmgmh8c="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2?package-id=030d50747141e21d","type":"library","name":"github.com/go-openapi/swag/stringutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/stringutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/stringutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lcnBxwAaysT3bMUVBfn9V/PkfVqkurpqufKU6rTUMGk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2?package-id=de722b8902c15cc7","type":"library","name":"github.com/go-openapi/swag/typeutils","version":"v0.29.2","cpe":"cpe:2.3:a:go-openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/typeutils@v0.29.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/typeutils:v0.29.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O7aVvkTs3pXwikgtrPLenigEMdQFgONKRooQA9pgf2I="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.1?package-id=6312fc26d31f3232","type":"library","name":"github.com/go-openapi/swag/yamlutils","version":"v0.29.1","cpe":"cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/swag/yamlutils@v0.29.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:swag\\/yamlutils:v0.29.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:69w3tsBajm7MR/fejLy7HD/3J68Ys1SeeZMEzZ3w2sk="}]},{"bom-ref":"pkg:golang/github.com/go-openapi/validate@v1.0.0?package-id=7465947131a5b540","type":"library","name":"github.com/go-openapi/validate","version":"v1.0.0","cpe":"cpe:2.3:a:go-openapi:validate:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-openapi/validate@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_openapi:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:validate:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dFsYCLVUQUL6Vi2lQSexgwmCXDuHe7eWRDhQxkE+xYA="}]},{"bom-ref":"pkg:golang/github.com/go-piv/piv-go/v2@v2.6.0?package-id=b4bd377f1a7b2452","type":"library","name":"github.com/go-piv/piv-go/v2","version":"v2.6.0","cpe":"cpe:2.3:a:go-piv:piv-go\\/v2:v2.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-piv/piv-go/v2@v2.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go-piv:piv_go\\/v2:v2.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_piv:piv-go\\/v2:v2.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_piv:piv_go\\/v2:v2.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:piv-go\\/v2:v2.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:piv_go\\/v2:v2.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Z+uqlv5luC8aqLh/uO05egk23UH4KT/ldvPHXpnKls="}]},{"bom-ref":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=69e67edfc2286e18","type":"library","name":"github.com/go-viper/mapstructure/v2","version":"v2.5.0","cpe":"cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro="}]},{"bom-ref":"pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=7e6951e683212209","type":"library","name":"github.com/gobwas/glob","version":"v0.2.3","cpe":"cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/gobwas/glob@v0.2.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y="}]},{"bom-ref":"pkg:golang/github.com/goccy/go-json@v0.10.6?package-id=fee6a9226de1485e","type":"library","name":"github.com/goccy/go-json","version":"v0.10.6","cpe":"cpe:2.3:a:goccy:go-json:v0.10.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/goccy/go-json@v0.10.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:goccy:go_json:v0.10.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:p8HrPJzOakx/mn/bQtjgNjdTcN+/S6FcG2CTtQOrHVU="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=175e8f8770db836d","type":"library","name":"github.com/golang-jwt/jwt/v4","version":"v4.5.2","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI="}]},{"bom-ref":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=a9123a7cdb8224b1","type":"library","name":"github.com/golang-jwt/jwt/v5","version":"v5.3.1","cpe":"cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY="}]},{"bom-ref":"pkg:golang/github.com/golang/snappy@v1.0.0?package-id=2961dc0093d40cf8","type":"library","name":"github.com/golang/snappy","version":"v1.0.0","cpe":"cpe:2.3:a:golang:snappy:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/golang/snappy@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Oy607GVXHs7RtbggtPBnr2RmDArIsAefDwvrdWvRhGs="}]},{"bom-ref":"pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=4600c7fdaee9f586","type":"library","name":"github.com/google/certificate-transparency-go","version":"v1.3.3","cpe":"cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/certificate-transparency-go@v1.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo="}]},{"bom-ref":"pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=879c470a8b8bf38a","type":"library","name":"github.com/google/gnostic-models","version":"v0.7.0","cpe":"cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/gnostic-models@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo="}]},{"bom-ref":"pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=473d0adb4b419c7e","type":"library","name":"github.com/google/go-cmp","version":"v0.7.0","cpe":"cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-cmp@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8="}]},{"bom-ref":"pkg:golang/github.com/google/go-containerregistry@v0.22.1?package-id=a0b833e866fd1de5","type":"library","name":"github.com/google/go-containerregistry","version":"v0.22.1","cpe":"cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-containerregistry@v0.22.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84="}]},{"bom-ref":"pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=a5e6dda16e96720b","type":"library","name":"github.com/google/go-github/v88","version":"v88.0.0","cpe":"cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-github/v88@v88.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M="}]},{"bom-ref":"pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=b574b3fe7741eeff","type":"library","name":"github.com/google/go-querystring","version":"v1.2.0","cpe":"cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/go-querystring@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0="}]},{"bom-ref":"pkg:golang/github.com/google/s2a-go@v0.1.11?package-id=6c8ed2b6d5fe3206","type":"library","name":"github.com/google/s2a-go","version":"v0.1.11","cpe":"cpe:2.3:a:google:s2a-go:v0.1.11:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/s2a-go@v0.1.11","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:s2a_go:v0.1.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:7v1V1TraNGP63WptsAkNqr2w8jgm4vM6A6qx6Lsw9iM="}]},{"bom-ref":"pkg:golang/github.com/google/uuid@v1.6.0?package-id=f6424607fde0264b","type":"library","name":"github.com/google/uuid","version":"v1.6.0","cpe":"cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/google/uuid@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0="}]},{"bom-ref":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22?package-id=ad57399cb3c994ee","type":"library","name":"github.com/googleapis/enterprise-certificate-proxy","version":"v0.3.22","cpe":"cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.22:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.22","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.22:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:NU4XpII6jD+Dxcot94fqjE+AfJoE/lQP9q3faYGzC/c="}]},{"bom-ref":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2?package-id=2946d2fad4a39755","type":"library","name":"github.com/googleapis/gax-go/v2","version":"v2.26.2","cpe":"cpe:2.3:a:googleapis:gax-go\\/v2:v2.26.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/googleapis/gax-go/v2@v2.26.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:googleapis:gax_go\\/v2:v2.26.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydkmNXxj7bEmmeK5AihkKnWxyOyBR9TDebvp5L5izk8="}]},{"bom-ref":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0?package-id=dbbf8163aeb38ff9","type":"library","name":"github.com/grpc-ecosystem/grpc-gateway/v2","version":"v2.30.0","cpe":"cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.30.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.30.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Tnpcb2E0Pz/tN9s3bfEY2Q8ePCEX9iuS+cneUwncnw="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=56b7e6360dd390d7","type":"library","name":"github.com/hashicorp/errwrap","version":"v1.1.0","cpe":"cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/errwrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=912d0981a4a0e36c","type":"library","name":"github.com/hashicorp/go-cleanhttp","version":"v0.5.2","cpe":"cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=b3d879cd60d2aaba","type":"library","name":"github.com/hashicorp/go-multierror","version":"v1.1.1","cpe":"cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-multierror@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=82e2538e01314882","type":"library","name":"github.com/hashicorp/go-retryablehttp","version":"v0.7.8","cpe":"cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=88a41202da0f0489","type":"library","name":"github.com/hashicorp/go-rootcerts","version":"v1.0.2","cpe":"cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=507b1688501fc20a","type":"library","name":"github.com/hashicorp/go-secure-stdlib/parseutil","version":"v0.2.0","cpe":"cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=50e0a12f2906f0e0","type":"library","name":"github.com/hashicorp/go-secure-stdlib/strutil","version":"v0.1.2","cpe":"cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=3767ecd5401149b7","type":"library","name":"github.com/hashicorp/go-sockaddr","version":"v1.0.7","cpe":"cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=999bbc4d5a4e5672","type":"library","name":"github.com/hashicorp/hcl","version":"v1.0.1-vault-7","cpe":"cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I="}]},{"bom-ref":"pkg:golang/github.com/hashicorp/vault/api@v1.23.0?package-id=e09327c6f11a3292","type":"library","name":"github.com/hashicorp/vault/api","version":"v1.23.0","cpe":"cpe:2.3:a:hashicorp:vault\\/api:v1.23.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/hashicorp/vault/api@v1.23.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:gXgluBsSECfRWTSW9niY2jwg2e9mMJc4WoHNv4g3h6A="}]},{"bom-ref":"pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=b49317b38e020536","type":"library","name":"github.com/in-toto/attestation","version":"v1.2.0","cpe":"cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/attestation@v1.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk="}]},{"bom-ref":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=b9d1745114e525fe","type":"library","name":"github.com/in-toto/in-toto-golang","version":"v0.11.0","cpe":"cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA="}]},{"bom-ref":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0?package-id=f6300927a9f6b106","type":"library","name":"github.com/inconshreveable/mousetrap","version":"v1.1.0","cpe":"cpe:2.3:a:inconshreveable:mousetrap:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8="}]},{"bom-ref":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=026aaa28dfd43938","type":"library","name":"github.com/jedisct1/go-minisign","version":"v0.0.0-20230811132847-661be99b8267","cpe":"cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY="}]},{"bom-ref":"pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.1?package-id=f2ba3c649362c6cc","type":"library","name":"github.com/jellydator/ttlcache/v3","version":"v3.4.1","cpe":"cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bOdXmXiycyK6E6Qjyuj5vl+/vU3SCOoDs8a86NbHjAQ="}]},{"bom-ref":"pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=b71b97451ba45321","type":"library","name":"github.com/json-iterator/go","version":"v1.1.12","cpe":"cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/json-iterator/go@v1.1.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM="}]},{"bom-ref":"pkg:golang/github.com/kelseyhightower/envconfig@v1.4.0?package-id=1a0a017da427751e","type":"library","name":"github.com/kelseyhightower/envconfig","version":"v1.4.0","cpe":"cpe:2.3:a:kelseyhightower:envconfig:v1.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kelseyhightower/envconfig@v1.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Im6hONhd3pLkfDFsbRgu68RDNkGF1r3dvMUtDTo2cv8="}]},{"bom-ref":"pkg:golang/github.com/klauspost/compress@v1.20.1?package-id=7c9fc9fc997a453a","type":"library","name":"github.com/klauspost/compress","version":"v1.20.1","cpe":"cpe:2.3:a:klauspost:compress:v1.20.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/klauspost/compress@v1.20.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:T7kKElXUMXrUJ2E9QhQhxFtcK5rPyLdsGZvdbLMPdiQ="}]},{"bom-ref":"pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=054bf546a3d78ff8","type":"library","name":"github.com/kylelemons/godebug","version":"v1.1.0","cpe":"cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/kylelemons/godebug@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=467dfc2aaacc1a64","type":"library","name":"github.com/lestrrat-go/blackmagic","version":"v1.0.4","cpe":"cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig@v1.3.0?package-id=777bd717f6ba5b76","type":"library","name":"github.com/lestrrat-go/dsig","version":"v1.3.0","cpe":"cpe:2.3:a:lestrrat-go:dsig:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:phjMOCXvYzhuIgn7Voe2rex8z166vGfxRxmqM25P9/Q="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0?package-id=d65a56cfe6081f49","type":"library","name":"github.com/lestrrat-go/dsig-secp256k1","version":"v1.0.0","cpe":"cpe:2.3:a:lestrrat-go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat-go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig-secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:dsig_secp256k1:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JpDe4Aybfl0soBvoVwjqDbp+9S1Y2OM7gcrVVMFPOzY="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=77082979d5501f35","type":"library","name":"github.com/lestrrat-go/httpcc","version":"v1.0.1","cpe":"cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6?package-id=cf71aec7b96d212c","type":"library","name":"github.com/lestrrat-go/httprc/v3","version":"v3.0.6","cpe":"cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.6","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4FpLQ18KK/ypPbVU3NLWJNRvH3kcYiqKqWfKGqNWxxI="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.2.0?package-id=f7d5bc354e37317a","type":"library","name":"github.com/lestrrat-go/jwx/v3","version":"v3.2.0","cpe":"cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/jwx/v3@v3.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:jwx\\/v3:v3.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Jb3zBASTSZXz7gzzSAfYqxXF8KejvKC4xWoePLQqXCA="}]},{"bom-ref":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=304fb132333f206a","type":"library","name":"github.com/lestrrat-go/option/v2","version":"v2.0.0","cpe":"cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss="}]},{"bom-ref":"pkg:golang/github.com/lib/pq@v1.12.0?package-id=5e187c56ca143fd0","type":"library","name":"github.com/lib/pq","version":"v1.12.0","cpe":"cpe:2.3:a:lib:pq:v1.12.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/lib/pq@v1.12.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:mC1zeiNamwKBecjHarAr26c/+d8V5w/u4J0I/yASbJo="}]},{"bom-ref":"pkg:golang/github.com/manifoldco/promptui@v0.9.0?package-id=ce676d8c40db9bfd","type":"library","name":"github.com/manifoldco/promptui","version":"v0.9.0","cpe":"cpe:2.3:a:manifoldco:promptui:v0.9.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/manifoldco/promptui@v0.9.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3V4HzJk1TtXW1MTZMP7mdlwbBpIinw3HztaIlYthEiA="}]},{"bom-ref":"pkg:golang/github.com/miekg/dns@v1.1.62?package-id=317bb2b243a9ccda","type":"library","name":"github.com/miekg/dns","version":"v1.1.62","cpe":"cpe:2.3:a:miekg:dns:v1.1.62:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/miekg/dns@v1.1.62","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cN8OuEF1/x5Rq6Np+h1epln8OiyPWV+lROx9LxcGgIQ="}]},{"bom-ref":"pkg:golang/github.com/miekg/pkcs11@v1.1.2?package-id=f546b6924768b5b6","type":"library","name":"github.com/miekg/pkcs11","version":"v1.1.2","cpe":"cpe:2.3:a:miekg:pkcs11:v1.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/miekg/pkcs11@v1.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/VxmeAX5qU6Q3EwafypogwWbYryHFmF2RpkJmw3m4MQ="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=0eaeac14455768a2","type":"library","name":"github.com/mitchellh/go-homedir","version":"v1.1.0","cpe":"cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-homedir@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=e395ab6147e93076","type":"library","name":"github.com/mitchellh/go-wordwrap","version":"v1.0.1","cpe":"cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0="}]},{"bom-ref":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=f1939e9fdaea380e","type":"library","name":"github.com/mitchellh/mapstructure","version":"v1.5.1-0.20231216201459-8508981c8b6c","cpe":"cpe:2.3:a:mitchellh:mapstructure:v1.5.1-0.20231216201459-8508981c8b6c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cqn374mizHuIWj+OSJCajGr/phAmuMug9qIX3l9CflE="}]},{"bom-ref":"pkg:golang/github.com/moby/term@v0.5.2?package-id=252c570f2f958b65","type":"library","name":"github.com/moby/term","version":"v0.5.2","cpe":"cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/moby/term@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ="}]},{"bom-ref":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=a36fc4a176d0ee4a","type":"library","name":"github.com/modern-go/concurrent","version":"v0.0.0-20180306012644-bacd9c7ef1dd","cpe":"cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg="}]},{"bom-ref":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=b199fcf302d10783","type":"library","name":"github.com/modern-go/reflect2","version":"v1.0.3-0.20250322232337-35a7c28c31ee","cpe":"cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8="}]},{"bom-ref":"pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.1?package-id=90444cb741eaceba","type":"library","name":"github.com/mozillazg/docker-credential-acr-helper","version":"v0.4.1","cpe":"cpe:2.3:a:mozillazg:docker-credential-acr-helper:v0.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozillazg:docker_credential_acr_helper:v0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:f8MOoueAItLW++oIuyHALHZVQU5RB9yOjgec6HPGFu8="}]},{"bom-ref":"pkg:golang/github.com/mozillazg/docker-credential-acr-helper/pkg/acr@v0.2.2?package-id=1fa22031a5d71df4","type":"library","name":"github.com/mozillazg/docker-credential-acr-helper/pkg/acr","version":"v0.2.2","cpe":"cpe:2.3:a:mozillazg:docker-credential-acr-helper\\/pkg\\/acr:v0.2.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/mozillazg/docker-credential-acr-helper/pkg/acr@v0.2.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozillazg:docker_credential_acr_helper\\/pkg\\/acr:v0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kpucZE0Et2zh2/hObaMV4XqIF/UeZt0cLuD76Y7AYyo="}]},{"bom-ref":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=2d33de0c2e03c980","type":"library","name":"github.com/munnerz/goautoneg","version":"v0.0.0-20191010083416-a7dc8b61c822","cpe":"cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA="}]},{"bom-ref":"pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=0a06cdc31fda58d0","type":"library","name":"github.com/natefinch/atomic","version":"v1.0.1","cpe":"cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/natefinch/atomic@v1.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A="}]},{"bom-ref":"pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=0283bef8feeba27d","type":"library","name":"github.com/nozzle/throttler","version":"v0.0.0-20180817012639-2ea982251481","cpe":"cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE="}]},{"bom-ref":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2?package-id=9acf0295fa47ad44","type":"library","name":"github.com/oklog/ulid/v2","version":"v2.1.2","cpe":"cpe:2.3:a:oklog:ulid\\/v2:v2.1.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/oklog/ulid/v2@v2.1.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IEclFb9JNvzYA6MW2SCxbLzcHTVsfqm3PrqGQJH5zec="}]},{"bom-ref":"pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=87f8b205634b0c0d","type":"library","name":"github.com/oleiade/reflections","version":"v1.1.0","cpe":"cpe:2.3:a:oleiade:reflections:v1.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/oleiade/reflections@v1.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:D+I/UsXQB4esMathlt0kkZRJZdUDmhv5zGi/HOwYTWo="}]},{"bom-ref":"pkg:golang/github.com/open-policy-agent/opa@v1.20.2?package-id=4541a6c07a2b4a65","type":"library","name":"github.com/open-policy-agent/opa","version":"v1.20.2","cpe":"cpe:2.3:a:open-policy-agent:opa:v1.20.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/open-policy-agent/opa@v1.20.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy_agent:opa:v1.20.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-policy:opa:v1.20.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open_policy:opa:v1.20.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:open:opa:v1.20.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:dlX5VEGA5M62W8+X1nRPEaQIh/CMRn5FcD1mebpKWKg="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=19989b5d142f3073","type":"library","name":"github.com/opencontainers/go-digest","version":"v1.0.0","cpe":"cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/go-digest@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U="}]},{"bom-ref":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=10613df95c6a2b3e","type":"library","name":"github.com/opencontainers/image-spec","version":"v1.1.1","cpe":"cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/opencontainers/image-spec@v1.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040="}]},{"bom-ref":"pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=8357eee9e68b10ca","type":"library","name":"github.com/pborman/uuid","version":"v1.2.1","cpe":"cpe:2.3:a:pborman:uuid:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pborman/uuid@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+ZZIw58t/ozdjRaXh/3awHfmWRbzYxJoAdNJxe/3pvw="}]},{"bom-ref":"pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1?package-id=046ac6e33dc86b99","type":"library","name":"github.com/pelletier/go-toml/v2","version":"v2.3.1","cpe":"cpe:2.3:a:pelletier:go-toml\\/v2:v2.3.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:pelletier:go_toml\\/v2:v2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:MYEvvGnQjeNkRF1qUuGolNtNExTDwct51yp7olPtrEc="}]},{"bom-ref":"pkg:golang/github.com/phuslu/lru@v1.0.18?package-id=6f675da55f90ff47","type":"library","name":"github.com/phuslu/lru","version":"v1.0.18","cpe":"cpe:2.3:a:phuslu:lru:v1.0.18:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/phuslu/lru@v1.0.18","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ioKRYLym7nv6UmaKHXSR0Z8s2KCEra+mcWcn9zXQnlM="}]},{"bom-ref":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=08a7556fc6c49a9b","type":"library","name":"github.com/pkg/browser","version":"v0.0.0-20240102092130-5ac0b6a4141c","cpe":"cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ="}]},{"bom-ref":"pkg:golang/github.com/pkg/errors@v0.9.1?package-id=2f2b4a7ce7872628","type":"library","name":"github.com/pkg/errors","version":"v0.9.1","cpe":"cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/pkg/errors@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_golang@v1.25.0?package-id=e3ad4df7975d3d99","type":"library","name":"github.com/prometheus/client_golang","version":"v1.25.0","cpe":"cpe:2.3:a:prometheus:client-golang:v1.25.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_golang@v1.25.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_golang:v1.25.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cDtW1TcFsMi1RJc8khwCKB4VhzwV04aKqbYtNOXuiK0="}]},{"bom-ref":"pkg:golang/github.com/prometheus/client_model@v0.6.3?package-id=238472447a143bfc","type":"library","name":"github.com/prometheus/client_model","version":"v0.6.3","cpe":"cpe:2.3:a:prometheus:client-model:v0.6.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/client_model@v0.6.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:prometheus:client_model:v0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O0jaTVAYNxTHYInEPFJt5I3+sN8zqBtVMPTB1qyxiEo="}]},{"bom-ref":"pkg:golang/github.com/prometheus/common@v0.72.0?package-id=6f75201561e23a4e","type":"library","name":"github.com/prometheus/common","version":"v0.72.0","cpe":"cpe:2.3:a:prometheus:common:v0.72.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/common@v0.72.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tAYsE+sPJxIncDAobm4H5aQjmox9ZxEIIqPbiffa8G4="}]},{"bom-ref":"pkg:golang/github.com/prometheus/procfs@v0.22.0?package-id=94f5059695d27172","type":"library","name":"github.com/prometheus/procfs","version":"v0.22.0","cpe":"cpe:2.3:a:prometheus:procfs:v0.22.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/prometheus/procfs@v0.22.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6q9+/JL9IKAPbCmBrv9n5O5Ty3NKnciV5X7YGw0oics="}]},{"bom-ref":"pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260420112717-c39628bde8b5?package-id=ba60d3ffdd5f3085","type":"library","name":"github.com/protocolbuffers/txtpbfmt","version":"v0.0.0-20260420112717-c39628bde8b5","cpe":"cpe:2.3:a:protocolbuffers:txtpbfmt:v0.0.0-20260420112717-c39628bde8b5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260420112717-c39628bde8b5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Mckui8l+Wqz2Ve7XQvsE8SbHNmDWu8NA7Xce5NFJ/kM="}]},{"bom-ref":"pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=ccba7952d6086b56","type":"library","name":"github.com/rcrowley/go-metrics","version":"v0.0.0-20250401214520-65e299d6c5c9","cpe":"cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg="}]},{"bom-ref":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0?package-id=21a01a44856d2683","type":"library","name":"github.com/rogpeppe/go-internal","version":"v1.16.0","cpe":"cpe:2.3:a:rogpeppe:go-internal:v1.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rogpeppe/go-internal@v1.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogpeppe:go_internal:v1.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g="}]},{"bom-ref":"pkg:golang/github.com/rs/cors@v1.11.1?package-id=8f54bde5413c96ec","type":"library","name":"github.com/rs/cors","version":"v1.11.1","cpe":"cpe:2.3:a:rs:cors:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/rs/cors@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eU3gRzXLRK57F5rKMGMZURNdIG4EoAmX8k94r9wXWHA="}]},{"bom-ref":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0?package-id=322467568497145e","type":"library","name":"github.com/russross/blackfriday/v2","version":"v2.1.0","cpe":"cpe:2.3:a:russross:blackfriday\\/v2:v2.1.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/russross/blackfriday/v2@v2.1.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk="}]},{"bom-ref":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=123848f88ea99b58","type":"library","name":"github.com/ryanuber/go-glob","version":"v1.0.0","cpe":"cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/ryanuber/go-glob@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk="}]},{"bom-ref":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=ddd1e2da24a21af5","type":"library","name":"github.com/sagikazarmark/locafero","version":"v0.11.0","cpe":"cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sagikazarmark/locafero@v0.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc="}]},{"bom-ref":"pkg:golang/github.com/sassoftware/relic/v8@v8.2.0?package-id=5f7da629d2005f63","type":"library","name":"github.com/sassoftware/relic/v8","version":"v8.2.0","cpe":"cpe:2.3:a:sassoftware:relic\\/v8:v8.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sassoftware/relic/v8@v8.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9/L4S4I6an/JsPNhmcTpqfiOIsLb/iJaePZD1xR+ulE="}]},{"bom-ref":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1?package-id=602059233fa52236","type":"library","name":"github.com/secure-systems-lab/go-securesystemslib","version":"v0.11.1","cpe":"cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go-securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:secure:go_securesystemslib:v0.11.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ayahDPjfSIqKegyt5YVGEvQ7SAi72GHXTy+b2YjUd5w="}]},{"bom-ref":"pkg:golang/github.com/segmentio/asm@v1.2.1?package-id=6e2ce7675f03c1d0","type":"library","name":"github.com/segmentio/asm","version":"v1.2.1","cpe":"cpe:2.3:a:segmentio:asm:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/segmentio/asm@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DTNbBqs57ioxAD4PrArqftgypG4/qNpXoJx8TVXxPR0="}]},{"bom-ref":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=632320b15aa9879e","type":"library","name":"github.com/shibumi/go-pathspec","version":"v1.3.0","cpe":"cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/shibumi/go-pathspec@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI="}]},{"bom-ref":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.2?package-id=cb527d8a14851126","type":"library","name":"github.com/sigstore/protobuf-specs","version":"v0.5.2","cpe":"cpe:2.3:a:sigstore:protobuf-specs:v0.5.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/protobuf-specs@v0.5.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:protobuf_specs:v0.5.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RSWWUY8QrVTxbYH00jY/jg2e7YnjzrpwP+PeHTMll0E="}]},{"bom-ref":"pkg:golang/github.com/sigstore/rekor@v1.5.4?package-id=90545fecbd4547f4","type":"library","name":"github.com/sigstore/rekor","version":"v1.5.4","cpe":"cpe:2.3:a:sigstore:rekor:v1.5.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/rekor@v1.5.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:A9zITTrkRwO+8lfq7L/gBR7rDHHcBQJRI+a0JQo4xDM="}]},{"bom-ref":"pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=2ca14c22ba357a5d","type":"library","name":"github.com/sigstore/rekor-tiles/v2","version":"v2.3.0","cpe":"cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore@v1.11.1?package-id=ae73bd47fb3322ac","type":"library","name":"github.com/sigstore/sigstore","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kPqGeoOk3IGCJH76ssgX5PKMm8mbHNnM9fhKLDc6M8E="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore-go@v1.3.0?package-id=905a2b6ff6accce5","type":"library","name":"github.com/sigstore/sigstore-go","version":"v1.3.0","cpe":"cpe:2.3:a:sigstore:sigstore-go:v1.3.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore-go@v1.3.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:sigstore_go:v1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:hnIMHREyCNTYFtOE1o7ae3Axa9B5W5EjUSBJICP2NBE="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.11.1?package-id=0c0aba3d6d26be3c","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/aws","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Xw+W6YvW/bQ3zSAYK6hsOQplGz/X9yOvCGeQLfkNy4c="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.11.1?package-id=60fd3938fceeb928","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/azure","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:UfIJOml1Y9uJwTy8cDbP7a6x/0By+fXIV7dyUHvEZlA="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.11.1?package-id=2db7ca8bd5061a42","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/gcp","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Ab4K/QqBmlmOu5X05qLTeQnPblVqqzrC//F7J/imzoI="}]},{"bom-ref":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.11.1?package-id=bf2df0d54b68c44f","type":"library","name":"github.com/sigstore/sigstore/pkg/signature/kms/hashivault","version":"v1.11.1","cpe":"cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.11.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.11.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:WIgn5z+Wx9ZM8MPTZlMIJ5YXZq36VrcYXFfCCokMqGc="}]},{"bom-ref":"pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.5?package-id=e58d9b8d057c99ae","type":"library","name":"github.com/sigstore/timestamp-authority/v2","version":"v2.1.5","cpe":"cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.5:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:VryyxIBepZ2ALtvkAAjBf9IF33iI6wX7ifiVWeBVhog="}]},{"bom-ref":"pkg:golang/github.com/sirupsen/logrus@v1.10.2?package-id=a50d10c5a936e134","type":"library","name":"github.com/sirupsen/logrus","version":"v1.10.2","cpe":"cpe:2.3:a:turbopuffer:logrus:v1.10.2:*:*:*:*:go:*:*","purl":"pkg:golang/github.com/sirupsen/logrus@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G2SED73/qrAu6YwbdxOD6peLkCBI3z7L+ykJFTXJBBo="}]},{"bom-ref":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=cfbd747de78458fc","type":"library","name":"github.com/sourcegraph/conc","version":"v0.3.1-0.20240121214520-5f936abd7ae8","cpe":"cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw="}]},{"bom-ref":"pkg:golang/github.com/spf13/afero@v1.15.0?package-id=577ab40ea4ceaedf","type":"library","name":"github.com/spf13/afero","version":"v1.15.0","cpe":"cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/afero@v1.15.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I="}]},{"bom-ref":"pkg:golang/github.com/spf13/cast@v1.10.0?package-id=b759ce340b0f2e0e","type":"library","name":"github.com/spf13/cast","version":"v1.10.0","cpe":"cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cast@v1.10.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY="}]},{"bom-ref":"pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=aaf4307e8bf5eb4c","type":"library","name":"github.com/spf13/cobra","version":"v1.10.2","cpe":"cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/cobra@v1.10.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU="}]},{"bom-ref":"pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=ec9ed93888749dc0","type":"library","name":"github.com/spf13/pflag","version":"v1.0.10","cpe":"cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/pflag@v1.0.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk="}]},{"bom-ref":"pkg:golang/github.com/spf13/viper@v1.21.0?package-id=53bb8bba12e970aa","type":"library","name":"github.com/spf13/viper","version":"v1.21.0","cpe":"cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spf13/viper@v1.21.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU="}]},{"bom-ref":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.2?package-id=cf98daecf2b69509","type":"library","name":"github.com/spiffe/go-spiffe/v2","version":"v2.8.2","cpe":"cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.8.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/spiffe/go-spiffe/v2@v2.8.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.8.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jUEsvCMD6fH25J8K/w3q/XnIx8W1lb8+YLaEEHIjHmc="}]},{"bom-ref":"pkg:golang/github.com/stretchr/testify@v1.12.1?package-id=d64a25dace8d069c","type":"library","name":"github.com/stretchr/testify","version":"v1.12.1","cpe":"cpe:2.3:a:stretchr:testify:v1.12.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/stretchr/testify@v1.12.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE="}]},{"bom-ref":"pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=2db166198c302bc1","type":"library","name":"github.com/subosito/gotenv","version":"v1.6.0","cpe":"cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/subosito/gotenv@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8="}]},{"bom-ref":"pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=d952f73256585b79","type":"library","name":"github.com/syndtr/goleveldb","version":"v1.0.1-0.20220721030215-126854af5e6d","cpe":"cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs="}]},{"bom-ref":"pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=0c53b157306fcdd3","type":"library","name":"github.com/tchap/go-patricia/v2","version":"v2.3.3","cpe":"cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc="}]},{"bom-ref":"pkg:golang/github.com/thales-e-security/pool@v0.0.2?package-id=a638f78244aa3bfa","type":"library","name":"github.com/thales-e-security/pool","version":"v0.0.2","cpe":"cpe:2.3:a:thales-e-security:pool:v0.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/thales-e-security/pool@v0.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:thales_e_security:pool:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thales-e:pool:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thales_e:pool:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:thales:pool:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RAPs4q2EbWsTit6tpzuvTFlgFRJ3S8Evf5gtvVDbmPg="}]},{"bom-ref":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=bc03feb72e7fbbd6","type":"library","name":"github.com/theupdateframework/go-tuf","version":"v0.7.0","cpe":"cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI="}]},{"bom-ref":"pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=d8f1357640cfa61b","type":"library","name":"github.com/theupdateframework/go-tuf/v2","version":"v2.4.2","cpe":"cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go-awskms/v3@v3.0.0?package-id=ca33a5e80268a077","type":"library","name":"github.com/tink-crypto/tink-go-awskms/v3","version":"v3.0.0","cpe":"cpe:2.3:a:tink-crypto:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go-awskms/v3@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go-awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go_awskms\\/v3:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XSohRhCkXAVI0iaCnWB/GS05TEmpnKurQmzaY1jzt3Y="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go-gcpkms/v2@v2.4.0?package-id=52951e90f07d765d","type":"library","name":"github.com/tink-crypto/tink-go-gcpkms/v2","version":"v2.4.0","cpe":"cpe:2.3:a:tink-crypto:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go-gcpkms/v2@v2.4.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go-gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go_gcpkms\\/v2:v2.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xpI5pnEQ0erFCS3JmcEl7Blluo8ZieEPNOURqy9uD70="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go-hcvault/v2@v2.5.0?package-id=53e65cb710dad4a9","type":"library","name":"github.com/tink-crypto/tink-go-hcvault/v2","version":"v2.5.0","cpe":"cpe:2.3:a:tink-crypto:tink-go-hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go-hcvault/v2@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go_hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go-hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go_hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go-hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go_hcvault\\/v2:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:eXuNqgrcYelxU1MVikOJDP3wTS5lvihM4ntoAbAMfvs="}]},{"bom-ref":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.8.0?package-id=04fb40cc8a2e223e","type":"library","name":"github.com/tink-crypto/tink-go/v2","version":"v2.8.0","cpe":"cpe:2.3:a:tink-crypto:tink-go\\/v2:v2.8.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tink-crypto/tink-go/v2@v2.8.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink-crypto:tink_go\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink-go\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink_crypto:tink_go\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink-go\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tink:tink_go\\/v2:v2.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1zODq1bZDqOQdNPjhvwGYLDw9On7mDWPnQf+4xXlpAc="}]},{"bom-ref":"pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=11b7354e0907edf7","type":"library","name":"github.com/tjfoc/gmsm","version":"v1.4.1","cpe":"cpe:2.3:a:tjfoc:gmsm:v1.4.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/tjfoc/gmsm@v1.4.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho="}]},{"bom-ref":"pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=f25afea1e286557c","type":"library","name":"github.com/transparency-dev/formats","version":"v0.1.1","cpe":"cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/transparency-dev/formats@v0.1.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI="}]},{"bom-ref":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=fa81f2ff3b1f0344","type":"library","name":"github.com/transparency-dev/merkle","version":"v0.0.2","cpe":"cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/transparency-dev/merkle@v0.0.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4="}]},{"bom-ref":"pkg:golang/github.com/urfave/negroni@v1.0.0?package-id=36c461f80b6f0608","type":"library","name":"github.com/urfave/negroni","version":"v1.0.0","cpe":"cpe:2.3:a:urfave:negroni:v1.0.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/urfave/negroni@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kIimOitoypq34K7TG7DUaJ9kq/N4Ofuwi1sjz0KipXc="}]},{"bom-ref":"pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=9ccc7f3f5098c217","type":"library","name":"github.com/valyala/fastjson","version":"v1.6.10","cpe":"cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/valyala/fastjson@v1.6.10","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4="}]},{"bom-ref":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.36?package-id=ee0532cc6918f791","type":"library","name":"github.com/vektah/gqlparser/v2","version":"v2.5.36","cpe":"cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.36:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/vektah/gqlparser/v2@v2.5.36","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CN9mKVHgMkc+XftdOWIhb4HEL8wKSYkFAqhf8booa7s="}]},{"bom-ref":"pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=e1bf063e64aeba7d","type":"library","name":"github.com/withfig/autocomplete-tools/integrations/cobra","version":"v1.2.1","cpe":"cpe:2.3:a:withfig:autocomplete-tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:withfig:autocomplete_tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I="}]},{"bom-ref":"pkg:golang/github.com/x448/float16@v0.8.4?package-id=413366d78e6a286c","type":"library","name":"github.com/x448/float16","version":"v0.8.4","cpe":"cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/x448/float16@v0.8.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=8d3359a3be622488","type":"library","name":"github.com/xeipuuv/gojsonpointer","version":"v0.0.0-20190905194746-02993c407bfb","cpe":"cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo="}]},{"bom-ref":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=2429773a33fd3e90","type":"library","name":"github.com/xeipuuv/gojsonreference","version":"v0.0.0-20180127040603-bd5ef7bd5415","cpe":"cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0="}]},{"bom-ref":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=a435657526b949cf","type":"library","name":"github.com/yashtewari/glob-intersection","version":"v0.2.0","cpe":"cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg="}]},{"bom-ref":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=d4ff633eaec278e7","type":"library","name":"github.com/youmark/pkcs8","version":"v0.0.0-20240726163527-a2c0da244d78","cpe":"cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM="}]},{"bom-ref":"pkg:golang/github.com/zalando/go-keyring@v0.2.8?package-id=032c7db76c3df380","type":"library","name":"github.com/zalando/go-keyring","version":"v0.2.8","cpe":"cpe:2.3:a:zalando:go-keyring:v0.2.8:*:*:*:*:*:*:*","purl":"pkg:golang/github.com/zalando/go-keyring@v0.2.8","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:zalando:go_keyring:v0.2.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:6sD/Ucpl7jNq10rM2pgqTs0sZ9V3qMrqfIIy5YPccHs="}]},{"bom-ref":"pkg:github/github/codeql-action@v2.16.1?package-id=6de78ee6431fac17#analyze","type":"library","name":"github/codeql-action/analyze","version":"v2.16.1","cpe":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql-action\\/analyze:v2.16.1:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.16.1#analyze","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/analyze:github\\/codeql_action\\/analyze:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql-action\\/analyze:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/analyze:github\\/codeql_action\\/analyze:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/analyze:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/analyze:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v2.16.1?package-id=2e759d2985bc3557#init","type":"library","name":"github/codeql-action/init","version":"v2.16.1","cpe":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql-action\\/init:v2.16.1:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.16.1#init","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/init:github\\/codeql_action\\/init:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql-action\\/init:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/init:github\\/codeql_action\\/init:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/init:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/init:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/codeql-analysis.yml"}]},{"bom-ref":"pkg:github/github/codeql-action@v2.16.1?package-id=428f00693ff72257#upload-sarif","type":"library","name":"github/codeql-action/upload-sarif","version":"v2.16.1","cpe":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql-action\\/upload-sarif:v2.16.1:*:*:*:*:*:*:*","purl":"pkg:github/github/codeql-action@v2.16.1#upload-sarif","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload-sarif:github\\/codeql_action\\/upload_sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql-action\\/upload-sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload_sarif:github\\/codeql_action\\/upload_sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql-action\\/upload-sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql-action\\/upload:github\\/codeql_action\\/upload_sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql-action\\/upload-sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql_action\\/upload:github\\/codeql_action\\/upload_sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql-action\\/upload-sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github\\/codeql:github\\/codeql_action\\/upload_sarif:v2.16.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-action.yml"}]},{"bom-ref":"pkg:golang/gitlab.com/gitlab-org/api/client-go/v3@v3.13.0?package-id=2fdf7219cd7b3063","type":"library","name":"gitlab.com/gitlab-org/api/client-go/v3","version":"v3.13.0","cpe":"cpe:2.3:a:gitlab-org:api\\/client-go\\/v3:v3.13.0:*:*:*:*:*:*:*","purl":"pkg:golang/gitlab.com/gitlab-org/api/client-go/v3@v3.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab-org:api\\/client_go\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client-go\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab_org:api\\/client_go\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client-go\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gitlab:api\\/client_go\\/v3:v3.13.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:CTUXvcL6OrGjYNafbws5C1lJwlXrxGJHWQGMF+hCdz0="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=a00544d9cf935bfa","type":"library","name":"go.opentelemetry.io/auto/sdk","version":"v1.2.1","cpe":"cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0?package-id=3213af39fa5aa303","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc","version":"v0.70.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.70.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.70.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:oECp5f+hN7nkwjU/8BxQ/q23bGPb8FIrD839owX222E="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0?package-id=6f30d1ccb9c91d63","type":"library","name":"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp","version":"v0.71.0","cpe":"cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.71.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.71.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:3g7B90UzBltIDKq1/5mrTGxTnOFDV0ICOhLoxiZ8jlg="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel@v1.46.0?package-id=142d52ab49e2757e","type":"library","name":"go.opentelemetry.io/otel","version":"v1.46.0","cpe":"cpe:2.3:a:opentelemetry:opentelemetry:v1.46.0:*:*:*:*:go:*:*","purl":"pkg:golang/go.opentelemetry.io/otel@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:FHt5/CDyVxi/8IM1CH7VE/rRgq3kLHa2mSTVMO8AWyc="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0?package-id=6ad8192bde1540ac","type":"library","name":"go.opentelemetry.io/otel/metric","version":"v1.46.0","cpe":"cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:yBnkXvgV7AXFILZc5K6IZe/CBFF3OS7BJ8ov6/lj0K8="}]},{"bom-ref":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0?package-id=63c323eece5da87c","type":"library","name":"go.opentelemetry.io/otel/trace","version":"v1.46.0","cpe":"cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*","purl":"pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:OULy7ccdJnZtJ0UDYFOIGaCmiWzJ8Vi2G/Rsu60qs1c="}]},{"bom-ref":"pkg:golang/go.uber.org/multierr@v1.11.0?package-id=ef196337207eb800","type":"library","name":"go.uber.org/multierr","version":"v1.11.0","purl":"pkg:golang/go.uber.org/multierr@v1.11.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0="}]},{"bom-ref":"pkg:golang/go.uber.org/zap@v1.28.0?package-id=25dd85e1ded5b566","type":"library","name":"go.uber.org/zap","version":"v1.28.0","purl":"pkg:golang/go.uber.org/zap@v1.28.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=1794e7f09a134d32","type":"library","name":"go.yaml.in/yaml/v2","version":"v2.4.4","cpe":"cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v2@v2.4.4","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ="}]},{"bom-ref":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5?package-id=4fc93c87aeebc64b","type":"library","name":"go.yaml.in/yaml/v3","version":"v3.0.5","cpe":"cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*","purl":"pkg:golang/go.yaml.in/yaml/v3@v3.0.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw="}]},{"bom-ref":"pkg:golang/golang.org/x/crypto@v0.58.0?package-id=15c1d9acb12062ba","type":"library","name":"golang.org/x/crypto","version":"v0.58.0","cpe":"cpe:2.3:a:golang:crypto:v0.58.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/crypto@v0.58.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:go:ssh:v0.58.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54="}]},{"bom-ref":"pkg:golang/golang.org/x/mod@v0.41.0?package-id=56d232e7120c3a8b","type":"library","name":"golang.org/x/mod","version":"v0.41.0","cpe":"cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/mod@v0.41.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c="}]},{"bom-ref":"pkg:golang/golang.org/x/net@v0.61.0?package-id=6128ad9f9e329ffe","type":"library","name":"golang.org/x/net","version":"v0.61.0","cpe":"cpe:2.3:a:golang:networking:v0.61.0:*:*:*:*:go:*:*","purl":"pkg:golang/golang.org/x/net@v0.61.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:golang:net:v0.61.0:*:*:*:*:go:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw="}]},{"bom-ref":"pkg:golang/golang.org/x/oauth2@v0.37.0?package-id=2e730bac8336b8f7","type":"library","name":"golang.org/x/oauth2","version":"v0.37.0","cpe":"cpe:2.3:a:golang:x\\/oauth2:v0.37.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/oauth2@v0.37.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JUlcxA8oAtauLfiH8FX2/FkAWHAdi0QtGCGc+hofE98="}]},{"bom-ref":"pkg:golang/golang.org/x/sync@v0.24.0?package-id=295e96fc2f845b35","type":"library","name":"golang.org/x/sync","version":"v0.24.0","cpe":"cpe:2.3:a:golang:x\\/sync:v0.24.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sync@v0.24.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA="}]},{"bom-ref":"pkg:golang/golang.org/x/sys@v0.49.0?package-id=aec8e4adcf0dcac2","type":"library","name":"golang.org/x/sys","version":"v0.49.0","cpe":"cpe:2.3:a:golang:x\\/sys:v0.49.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/sys@v0.49.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA="}]},{"bom-ref":"pkg:golang/golang.org/x/term@v0.47.0?package-id=8db19b9b9f8e30c1","type":"library","name":"golang.org/x/term","version":"v0.47.0","cpe":"cpe:2.3:a:golang:x\\/term:v0.47.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/term@v0.47.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM="}]},{"bom-ref":"pkg:golang/golang.org/x/text@v0.43.0?package-id=70a65622f5a0d35d","type":"library","name":"golang.org/x/text","version":"v0.43.0","cpe":"cpe:2.3:a:golang:text:v0.43.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/text@v0.43.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc="}]},{"bom-ref":"pkg:golang/golang.org/x/time@v0.16.0?package-id=90e57fc7c651498e","type":"library","name":"golang.org/x/time","version":"v0.16.0","cpe":"cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/time@v0.16.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE="}]},{"bom-ref":"pkg:golang/golang.org/x/tools@v0.51.0?package-id=9208579da0e0c549","type":"library","name":"golang.org/x/tools","version":"v0.51.0","cpe":"cpe:2.3:a:golang:x\\/tools:v0.51.0:*:*:*:*:*:*:*","purl":"pkg:golang/golang.org/x/tools@v0.51.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:k4Xc/1Om9jwkBJBo4NVLMSARBoWtK10mx+W5BnXCeAI="}]},{"bom-ref":"pkg:github/golangci/golangci-lint-action@v9.3.0?package-id=d7cc3b4927623d8f","type":"library","name":"golangci/golangci-lint-action","version":"v9.3.0","cpe":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*","purl":"pkg:github/golangci/golangci-lint-action@v9.3.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint-action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint_action:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci-lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci_lint:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci-lint-action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:golangci\\/golangci:golangci\\/golangci_lint_action:v9.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/golangci-lint.yml"}]},{"bom-ref":"pkg:github/google-github-actions/auth@v3.0.0?package-id=169acb3e691d5cee","type":"library","name":"google-github-actions/auth","version":"v3.0.0","cpe":"cpe:2.3:a:google-github-actions\\/auth:google-github-actions\\/auth:v3.0.0:*:*:*:*:*:*:*","purl":"pkg:github/google-github-actions/auth@v3.0.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:google-github-actions\\/auth:google_github_actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google_github_actions\\/auth:google-github-actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google_github_actions\\/auth:google_github_actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google-github:google-github-actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google-github:google_github_actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google_github:google-github-actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google_github:google_github_actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:google-github-actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:google:google_github_actions\\/auth:v3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:golang/google.golang.org/api@v0.301.0?package-id=802bda7413bdaf94","type":"library","name":"google.golang.org/api","version":"v0.301.0","cpe":"cpe:2.3:a:google:api:v0.301.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/api@v0.301.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:rTvI8szs17R7b09ggb34Bv4XrmFaFl9uCBncgxskqtw="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d?package-id=64224fe56b48ea1d","type":"library","name":"google.golang.org/genproto","version":"v0.0.0-20260715232425-e75dac1f907d","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:C9v1o0/4quuhOAfmRXA2j+we0PqZIp8traLdeogF3Ms="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688?package-id=6f6a76a0e0d33b13","type":"library","name":"google.golang.org/genproto/googleapis/api","version":"v0.0.0-20260819154853-08b0e4226688","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260819154853-08b0e4226688:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260819154853-08b0e4226688","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:ax2KzoSRIZU/M0cIxri3pKxy99vniH1PVxWC6si/eZI="}]},{"bom-ref":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc?package-id=93fa231d9e0f71fa","type":"library","name":"google.golang.org/genproto/googleapis/rpc","version":"v0.0.0-20260928230214-8a89bd6388cc","cpe":"cpe:2.3:a:google:genproto:v0.0.0-20260928230214-8a89bd6388cc:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260928230214-8a89bd6388cc","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:4bNTbnb44EqGVy9HaQxSY2jnafSUdgV3qHtedvNpDKg="}]},{"bom-ref":"pkg:golang/google.golang.org/grpc@v1.84.0?package-id=54bcc746f2ab7987","type":"library","name":"google.golang.org/grpc","version":"v1.84.0","cpe":"cpe:2.3:a:google:grpc:v1.84.0:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/grpc@v1.84.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:soMyaPJ8pAak5PIQ0DGBUir0XRo2fRoMqhNWMLlLxO0="}]},{"bom-ref":"pkg:golang/google.golang.org/protobuf@v1.36.12?package-id=0055873c0ce1a39b","type":"library","name":"google.golang.org/protobuf","version":"v1.36.12","cpe":"cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*","purl":"pkg:golang/google.golang.org/protobuf@v1.36.12","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc="}]},{"bom-ref":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=54838b79820fd4c9","type":"library","name":"gopkg.in/evanphx/json-patch.v4","version":"v4.13.0","purl":"pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo="}]},{"bom-ref":"pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=da26a12b6ed4d20c","type":"library","name":"gopkg.in/inf.v0","version":"v0.9.1","purl":"pkg:golang/gopkg.in/inf.v0@v0.9.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc="}]},{"bom-ref":"pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=8f99b4759d521906","type":"library","name":"gopkg.in/ini.v1","version":"v1.67.3","purl":"pkg:golang/gopkg.in/ini.v1@v1.67.3","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw="}]},{"bom-ref":"pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=716c668b92999095","type":"library","name":"gopkg.in/yaml.v3","version":"v3.0.1","cpe":"cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*","purl":"pkg:golang/gopkg.in/yaml.v3@v3.0.1","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA="}]},{"bom-ref":"pkg:github/imjasonh/setup-crane@v0.7?package-id=9089001ecf9f4183","type":"library","name":"imjasonh/setup-crane","version":"v0.7","cpe":"cpe:2.3:a:imjasonh\\/setup-crane:imjasonh\\/setup-crane:v0.7:*:*:*:*:*:*:*","purl":"pkg:github/imjasonh/setup-crane@v0.7","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:imjasonh\\/setup-crane:imjasonh\\/setup_crane:v0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:imjasonh\\/setup_crane:imjasonh\\/setup-crane:v0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:imjasonh\\/setup_crane:imjasonh\\/setup_crane:v0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:imjasonh\\/setup:imjasonh\\/setup-crane:v0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:imjasonh\\/setup:imjasonh\\/setup_crane:v0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:golang/k8s.io/api@v0.36.2?package-id=c44f08d7aa2dbc73","type":"library","name":"k8s.io/api","version":"v0.36.2","purl":"pkg:golang/k8s.io/api@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY="}]},{"bom-ref":"pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=a37b7b1f0ae54a3c","type":"library","name":"k8s.io/apimachinery","version":"v0.36.2","purl":"pkg:golang/k8s.io/apimachinery@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ="}]},{"bom-ref":"pkg:golang/k8s.io/client-go@v0.36.2?package-id=44953f8055b4755e","type":"library","name":"k8s.io/client-go","version":"v0.36.2","purl":"pkg:golang/k8s.io/client-go@v0.36.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI="}]},{"bom-ref":"pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=1239873eaf62af00","type":"library","name":"k8s.io/klog/v2","version":"v2.140.0","cpe":"cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*","purl":"pkg:golang/k8s.io/klog/v2@v2.140.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc="}]},{"bom-ref":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=c62f7cdb7602f7c3","type":"library","name":"k8s.io/kube-openapi","version":"v0.0.0-20260317180543-43fb72c5454a","purl":"pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg="}]},{"bom-ref":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=ec441e3b96b1290a","type":"library","name":"k8s.io/utils","version":"v0.0.0-20260210185600-b8788abfbbc2","purl":"pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU="}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=5eec03f0a508a3d4","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=1adc3bdaf053bd7c","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/github-oidc.yaml"}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=6e1b2e593dcf7a02","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/ko-build/setup-ko@v0.10?package-id=6f6898966058bb92","type":"library","name":"ko-build/setup-ko","version":"v0.10","cpe":"cpe:2.3:a:ko-build\\/setup-ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*","purl":"pkg:github/ko-build/setup-ko@v0.10","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup-ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup_ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko-build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko_build\\/setup:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko-build\\/setup-ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ko:ko_build\\/setup_ko:v0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/tests.yaml"}]},{"bom-ref":"pkg:github/mikefarah/yq@v4.54.1?package-id=f06e9f34353a27c2","type":"library","name":"mikefarah/yq","version":"v4.54.1","cpe":"cpe:2.3:a:mikefarah\\/yq:mikefarah\\/yq:v4.54.1:*:*:*:*:*:*:*","purl":"pkg:github/mikefarah/yq@v4.54.1","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/ossf/scorecard-action@v2.5.0?package-id=3b23aa1675e18627","type":"library","name":"ossf/scorecard-action","version":"v2.5.0","cpe":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard-action:v2.5.0:*:*:*:*:*:*:*","purl":"pkg:github/ossf/scorecard-action@v2.5.0","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard-action:ossf\\/scorecard_action:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard-action:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard_action:ossf\\/scorecard_action:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard-action:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ossf\\/scorecard:ossf\\/scorecard_action:v2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/scorecard-action.yml"}]},{"bom-ref":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=ec32c0f5bc606249","type":"library","name":"sigs.k8s.io/json","version":"v0.0.0-20250730193827-2d320260d730","purl":"pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=4bfa21fc21b1ff5b","type":"library","name":"sigs.k8s.io/randfill","version":"v1.0.0","purl":"pkg:golang/sigs.k8s.io/randfill@v1.0.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/release-utils@v0.12.5?package-id=f2ade2b3ff45edd6","type":"library","name":"sigs.k8s.io/release-utils","version":"v0.12.5","purl":"pkg:golang/sigs.k8s.io/release-utils@v0.12.5","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:/Ybntn/M7sK+6XjaH88y3pfx3tpJod3WKiItxoS4igg="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=6477ea84c5316046","type":"library","name":"sigs.k8s.io/structured-merge-diff/v6","version":"v6.3.2","cpe":"cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*","purl":"pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8="}]},{"bom-ref":"pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=95ee3a98ac8d2d6e","type":"library","name":"sigs.k8s.io/yaml","version":"v1.6.0","purl":"pkg:golang/sigs.k8s.io/yaml@v1.6.0","properties":[{"name":"syft:package:foundBy","value":"go-module-file-cataloger"},{"name":"syft:package:language","value":"go"},{"name":"syft:package:type","value":"go-module"},{"name":"syft:package:metadataType","value":"go-module-entry"},{"name":"syft:location:0:path","value":"/go.mod"},{"name":"syft:metadata:h1Digest","value":"h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs="}]},{"bom-ref":"pkg:github/sigstore/community@main?package-id=b94998afe4e38116#.github/workflows/reusable-dependency-review.yml","type":"library","name":"sigstore/community/.github/workflows/reusable-dependency-review.yml","version":"main","cpe":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/community@main#.github/workflows/reusable-dependency-review.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable-dependency-review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable_dependency_review.yml:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/depsreview.yml"}]},{"bom-ref":"pkg:github/sigstore/community@main?package-id=fc356c64fbabfbe9#.github/workflows/reusable-release.yml","type":"library","name":"sigstore/community/.github/workflows/reusable-release.yml","version":"main","cpe":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/community@main#.github/workflows/reusable-release.yml","properties":[{"name":"syft:package:foundBy","value":"github-action-workflow-usage-cataloger"},{"name":"syft:package:type","value":"github-action-workflow"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable-release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/community\\/.github\\/workflows\\/reusable:sigstore\\/community\\/.github\\/workflows\\/reusable_release.yml:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/cut-release.yml"}]},{"bom-ref":"pkg:github/sigstore/cosign-installer@v4.1.2?package-id=449b1fbe8e5e79f2","type":"library","name":"sigstore/cosign-installer","version":"v4.1.2","cpe":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/cosign-installer@v4.1.2","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign-installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign_installer:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign-installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/cosign:sigstore\\/cosign_installer:v4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/build.yaml"}]},{"bom-ref":"pkg:github/sigstore/scaffolding@main?package-id=b1eabb7eb2cbab55#actions/setup","type":"library","name":"sigstore/scaffolding/actions/setup","version":"main","cpe":"cpe:2.3:a:sigstore\\/scaffolding\\/actions\\/setup:sigstore\\/scaffolding\\/actions\\/setup:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/scaffolding@main#actions/setup","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/e2e-tests.yml"}]},{"bom-ref":"pkg:github/sigstore/scaffolding@main?package-id=ad3edaa737efa3ab#actions/setup","type":"library","name":"sigstore/scaffolding/actions/setup","version":"main","cpe":"cpe:2.3:a:sigstore\\/scaffolding\\/actions\\/setup:sigstore\\/scaffolding\\/actions\\/setup:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/scaffolding@main#actions/setup","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:location:0:path","value":"/.github/workflows/kind-verify-attestation.yaml"}]},{"bom-ref":"pkg:github/sigstore/sigstore-conformance@main?package-id=5d2e80930bf643bf","type":"library","name":"sigstore/sigstore-conformance","version":"main","cpe":"cpe:2.3:a:sigstore\\/sigstore-conformance:sigstore\\/sigstore-conformance:main:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/sigstore-conformance@main","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore-conformance:sigstore\\/sigstore_conformance:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore_conformance:sigstore\\/sigstore-conformance:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore_conformance:sigstore\\/sigstore_conformance:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore:sigstore\\/sigstore-conformance:main:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore:sigstore\\/sigstore_conformance:main:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance-nightly.yml"}]},{"bom-ref":"pkg:github/sigstore/sigstore-conformance@v0.0.29?package-id=2e9db98bc33a587a","type":"library","name":"sigstore/sigstore-conformance","version":"v0.0.29","cpe":"cpe:2.3:a:sigstore\\/sigstore-conformance:sigstore\\/sigstore-conformance:v0.0.29:*:*:*:*:*:*:*","purl":"pkg:github/sigstore/sigstore-conformance@v0.0.29","properties":[{"name":"syft:package:foundBy","value":"github-actions-usage-cataloger"},{"name":"syft:package:type","value":"github-action"},{"name":"syft:package:metadataType","value":"github-actions-use-statement"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore-conformance:sigstore\\/sigstore_conformance:v0.0.29:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore_conformance:sigstore\\/sigstore-conformance:v0.0.29:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore_conformance:sigstore\\/sigstore_conformance:v0.0.29:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore:sigstore\\/sigstore-conformance:v0.0.29:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sigstore\\/sigstore:sigstore\\/sigstore_conformance:v0.0.29:*:*:*:*:*:*:*"},{"name":"syft:location:0:path","value":"/.github/workflows/conformance.yml"}]},{"bom-ref":"2f60db276a7a09af","type":"file","name":"/.github/workflows/build.yaml","hashes":[{"alg":"SHA-1","content":"ddbd3f7ce8eb5845415f95d5c76ba4acd1e0575f"},{"alg":"SHA-256","content":"4f0ad6d16c3e7da0ad698b29ec172924e69b3ce7307c0993bf40ab73c805b5c0"}]},{"bom-ref":"5e19ea2e1f9dfee4","type":"file","name":"/.github/workflows/codeql-analysis.yml","hashes":[{"alg":"SHA-1","content":"21f526b6896b2c37e0555367607e2c54a468ea7c"},{"alg":"SHA-256","content":"1d29732d29810107a50c00cc6c4a8c6811c95308f94245715b7cccbc25084b88"}]},{"bom-ref":"d99cd4927f7758f7","type":"file","name":"/.github/workflows/conformance-nightly.yml","hashes":[{"alg":"SHA-1","content":"3c1cb9599939cf2ea1281164ebb02b5ffa650afd"},{"alg":"SHA-256","content":"00b473f1a0add1a23e110fe92feba5969bbc3fd24f9de1b9f8d02a7f86e07457"}]},{"bom-ref":"f7c79e80765e702a","type":"file","name":"/.github/workflows/conformance.yml","hashes":[{"alg":"SHA-1","content":"0840b9eda5848a4e9a1273534e87010b0c2d0738"},{"alg":"SHA-256","content":"829aeaedea6cdd0cf4924032c91429ccbd673f5319483aa6d15186303d9e5b24"}]},{"bom-ref":"1f65244708e42815","type":"file","name":"/.github/workflows/cut-release.yml","hashes":[{"alg":"SHA-1","content":"99bb71b3f88a83fd407634cce3b90b346fca36b3"},{"alg":"SHA-256","content":"b7d77aed8a262eeacec704b09f63b29f937d424fec4df5e9becabc60613b1320"}]},{"bom-ref":"1aaf5f65e4a438ab","type":"file","name":"/.github/workflows/depsreview.yml","hashes":[{"alg":"SHA-1","content":"be792c9082ac5f7ca8c1cffdb1587acdc1a322d3"},{"alg":"SHA-256","content":"a45cef534fffd0cc7f63547957d42786607a9377574b873c4fb355c08f9563af"}]},{"bom-ref":"9c48f4e84f7e3ca3","type":"file","name":"/.github/workflows/donotsubmit.yaml","hashes":[{"alg":"SHA-1","content":"b919c8b931712c5b8c4fb4d616ceeca95c0f1d91"},{"alg":"SHA-256","content":"bb0434764918bda645d5ebfdb45f600c9452fbcb8db9b97471d71180f914d27b"}]},{"bom-ref":"83f337688bc2177d","type":"file","name":"/.github/workflows/e2e-tests.yml","hashes":[{"alg":"SHA-1","content":"9aaa4b70772f43adc950e82adf9c6a60306be888"},{"alg":"SHA-256","content":"b5305f11a2f9abadf9c4a83fb2e17eb428e9099f2115e48afcee93fad7b5d307"}]},{"bom-ref":"b343c22b19ead5fa","type":"file","name":"/.github/workflows/e2e-with-binary.yml","hashes":[{"alg":"SHA-1","content":"0df9bda7566411a9694f7ab917ade6fd7a21502e"},{"alg":"SHA-256","content":"3835cdf47ee6b67d95764775651ce44131ef577f9f01ca4cade4957cbd28c9df"}]},{"bom-ref":"fac0c232ca76dfd2","type":"file","name":"/.github/workflows/github-oidc.yaml","hashes":[{"alg":"SHA-1","content":"6ef6b19c83bfdc41580a4ff2019c80d3b8a85f85"},{"alg":"SHA-256","content":"424bcdd5604527b7d86c9a6c16a2ead96c97d5d18164f2fcb1fbfdd0d74359f6"}]},{"bom-ref":"ecc57af6cbd8c402","type":"file","name":"/.github/workflows/golangci-lint.yml","hashes":[{"alg":"SHA-1","content":"ebec6e93ebaa5be46462ef6dce86f1c73c5d5381"},{"alg":"SHA-256","content":"05a7f98483de3f8860d71985fa0aa343f9b3d02c5ff1df7332c755e68d10bcc7"}]},{"bom-ref":"496d5f0087f48de8","type":"file","name":"/.github/workflows/kind-verify-attestation.yaml","hashes":[{"alg":"SHA-1","content":"d56816536ea471447adbeeb43bd44419b7e9a119"},{"alg":"SHA-256","content":"62b9dd134039c15c2cc42b762de7f0c465f2a97c8296fe56a2963a651b92d06e"}]},{"bom-ref":"f8e9dc9e3eac99ca","type":"file","name":"/.github/workflows/scorecard-action.yml","hashes":[{"alg":"SHA-1","content":"938c24dc9023545d2139813a766c58fff264afd7"},{"alg":"SHA-256","content":"5f7f545ca1b2b8ec3264686bdbd873278bac12629c54c04b721ae130d98307ff"}]},{"bom-ref":"81a37806e3282699","type":"file","name":"/.github/workflows/tests.yaml","hashes":[{"alg":"SHA-1","content":"a02a91cae0df914894af44e6ff39368aa86a77f1"},{"alg":"SHA-256","content":"b1c1cfe92fd453b83ad7540debd89800bed6558953205813af09024800c7b9a6"}]},{"bom-ref":"4908b26fc252bf5c","type":"file","name":"/.github/workflows/validate-release.yml","hashes":[{"alg":"SHA-1","content":"78539982f2c43e184f8475d8848f83f54a9fa558"},{"alg":"SHA-256","content":"78891674f797fca6b0dceda4cde161ff9eeb8a3e0a20ba1ee59047ffb8ee6b6a"}]},{"bom-ref":"50894be4a77cde8a","type":"file","name":"/.github/workflows/verify-docgen.yaml","hashes":[{"alg":"SHA-1","content":"b76ab5801418abd6dfed44ae5e0988d3ee8d4e53"},{"alg":"SHA-256","content":"13be7356c9a8e9da9d418b80cf7db2f0dadcc847f37c88ca80f6144ebf8ec260"}]},{"bom-ref":"6ce69ebd3b4119fa","type":"file","name":"/.github/workflows/whitespace.yaml","hashes":[{"alg":"SHA-1","content":"7877d7425307f5edbfd474d296e047b075caa580"},{"alg":"SHA-256","content":"3c627c86c895f22ae9d8bcdb54c5a54e5c3f48fdc7096d28c6ef4e6853992f67"}]},{"bom-ref":"3fc5a8d3d86e9790","type":"file","name":"/go.mod","hashes":[{"alg":"SHA-1","content":"6de9e195e4dcf2ced4d64d0697bc3da5d886c94d"},{"alg":"SHA-256","content":"3ab9456629ccb0af80e0f2c5b197a0f09b9d83bfcc0152ec9add1e3499d86327"}]}]}